Features 


1. 


The AT25DF161 is a serial interface Flash memory device designed for use in a wide 
variety of high-volume consumer based applications in which program code is shad- 
owed from Flash memory into embedded or external RAM for execution. The flexible 
erase architecture of the AT25DF 161, with its erase granularity as small as 4-Kbytes, 
makes it ideal for data storage as well, eliminating the need for additional data storage 


Single 2.7V - 3.6V Supply 
Serial Peripheral Interface (SPI) Compatible 
— Supports SPI Modes 0 and 3 
— Supports RapidS Operation 
— Supports Dual-Input Program and Dual-Output Read 
Very High Operating Frequencies 
— 100 MHz for RapidS 
— 85 MHz for SPI 
— Clock-to-Output (ty) of 5 ns Maximum 
Flexible, Optimized Erase Architecture for Code + Data Storage Applications 
— Uniform 4-Kbyte Block Erase 
— Uniform 32-Kbyte Block Erase 
— Uniform 64-Kbyte Block Erase 
— Full Chip Erase 
Individual Sector Protection with Global Protect/Unprotect Feature 
— 32 Sectors of 64-Kbytes Each 
Hardware Controlled Locking of Protected Sectors via WP Pin 
Sector Lockdown 
— Make Any Combination of 64-Kbyte Sectors Permanently Read-Only 
128-Byte Programmable OTP Security Register 
Flexible Programming 
— Byte/Page Program (1 to 256 Bytes) 
Fast Program and Erase Times 
— 1.0 ms Typical Page Program (256 Bytes) Time 
— 50 ms Typical 4-Kbyte Block Erase Time 
— 250 ms Typical 32-Kbyte Block Erase Time 
— 400 ms Typical 64-Kbyte Block Erase Time 
Program and Erase Suspend/Resume 
Automatic Checking and Reporting of Erase/Program Failures 
Software Controlled Reset 
JEDEC Standard Manufacturer and Device ID Read Methodology 
Low Power Dissipation 
— 5mA Active Read Current (Typical at 20 MHz) 
— 5 WA Deep Power-Down Current (Typical) 
Endurance: 100,000 Program/Erase Cycles 
Data Retention: 20 Years 
Complies with Full Industrial Temperature Range 
Industry Standard Green (Pb/Halide-free/RoHS Compliant) Package Options 
— 8-lead SOIC (150-mil and 208-mil wide) 
— 8-pad Ultra Thin DFN (5 x 6 x 0.6 mm) 
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The physical sectoring and the erase block sizes of the AT25DF161 have been optimized to 
meet the needs of today's code and data storage applications. By optimizing the size of the 
physical sectors and erase blocks, the memory space can be used much more efficiently. 
Because certain code modules and data storage segments must reside by themselves in their 
own protected sectors, the wasted and unused memory space that occurs with large sectored 
and large block erase Flash memory devices can be greatly reduced. This increased memory 
space efficiency allows additional code routines and data storage segments to be added while 
still maintaining the same overall device density. 


The AT25DF161 also offers a sophisticated method for protecting individual sectors against 
erroneous or malicious program and erase operations. By providing the ability to individually pro- 
tect and unprotect sectors, a system can unprotect a specific sector to modify its contents while 
keeping the remaining sectors of the memory array securely protected. This is useful in applica- 
tions where program code is patched or updated on a subroutine or module basis, or in 
applications where data storage segments need to be modified without running the risk of errant 
modifications to the program code segments. In addition to individual sector protection capabili- 
ties, the AT25DF161 incorporates Global Protect and Global Unprotect features that allow the 
entire memory array to be either protected or unprotected all at once. This reduces overhead 
during the manufacturing process since sectors do not have to be unprotected one-by-one prior 
to initial programming. 


To take code and data protection to the next level, the AT25DF 161 incorporates a sector lock- 
down mechanism that allows any combination of individual 64-Kbyte sectors to be locked down 
and become permanently read-only. This addresses the need of certain secure applications that 
require portions of the Flash memory array to be permanently protected against malicious 
attempts at altering program code, data modules, security information, or encryption/decryption 
algorithms, keys, and routines. The device also contains a specialized OTP (One-Time Pro- 
grammable) Security Register that can be used for purposes such as unique device 
serialization, system-level Electronic Serial Number (ESN) storage, locked key storage, etc. 


Specifically designed for use in 3-volt systems, the AT25DF161 supports read, program, and 
erase operations with a supply voltage range of 2.7V to 3.6V. No separate voltage is required for 
programming and erasing. 
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2. Pin Descriptions and Pinouts 


Table 2-1. 


Symbol 


Pin Descriptions 


Name and Function 


CHIP SELECT: Asserting the cs pin selects the device. When the CS pin is deasserted, the 
device will be deselected and normally be placed in standby mode (not Deep Power-Down 
mode), and the SO pin will be in a high-impedance state. When the device is deselected, 
data will not be accepted on the SI pin. 

A high-to-low transition on the CS pin is required to start an operation, and a low-to-high 
transition is required to end an operation. When ending an internally self-timed operation 
such as a program or erase cycle, the device will not enter the standby mode until the 
completion of the operation. 


Asserted 
State 


Low 


Type 


Input 





SCK 


SERIAL CLOCK: This pin is used to provide a clock to the device and is used to control the 
flow of data to and from the device. Command, address, and input data present on the SI pin 
is always latched in on the rising edge of SCK, while output data on the SO pin is always 
clocked out on the falling edge of SCK. 


Input 





SI (SIO) 


SERIAL INPUT (SERIAL INPUT/OUTPUT): The SI pin is used to shift data into the device. 
The Sl pin is used for all data input including command and address sequences. Data on the 
SI pin is always latched in on the rising edge of SCK. 

With the Dual-Output Read Array command, the SI pin becomes an output pin (SIO) to allow 
two bits of data (on the SO and SIO pins) to be clocked out on every falling edge of SCK. To 
maintain consistency with SPI nomenclature, the SIO pin will be referenced as SI throughout 
the document with exception to sections dealing with the Dual-Output Read Array command 
in which it will be referenced as SIO. 

Data present on the SI pin will be ignored whenever the device is deselected (cS is 
deasserted). 


Input/Output 





SO (SOI) 


SERIAL OUTPUT (SERIAL OUTPUT/INPUT): The SO pin is used to shift data out from the 
device. Data on the SO pin is always clocked out on the falling edge of SCK. 

With the Dual-Input Byte/Page Program command, the SO pin becomes an input pin (SOI) 
to allow two bits of data (on the SOI and SI pins) to be clocked in on every rising edge of 
SCK. To maintain consistency with SPI nomenclature, the SOI pin will be referenced as SO 
throughout the document with exception to sections dealing with the Dual-Input Byte/Page 
Program command in which it will be referenced as SOI. 

The SO pin will be in a high-impedance state whenever the device is deselected (CS is 
deasserted). 


Output/Input 











WRITE PROTECT: The WP pin controls the hardware locking feature of the device. Please 
refer to “Protection Commands and Features” on page 21 for more details on protection 
features and the WP pin. 

The WP pin is internally pulled-high and may be left floating if hardware controlled protection 
will not be used. However, it is recommended that the WP pin also be externally connected 
to Voc whenever possible. 





Low 





Input 
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Table 2-1. Pin Descriptions (Continued) 


Asserted 
Symbol Name and Function State Type 


HOLD: The HOLD pin is used to temporarily pause serial communication without 
deselecting or resetting the device. While the HOLD pin is asserted, transitions on the SCK 
pin and data on the SI pin will be ignored, and the SO pin will be in a high-impedance state. 
The CS pin must be asserted, and the SCK pin must be in the low state in order for a Hold 
condition to start. A Hold condition pauses serial communication only and does not have an 
effect on internally self-timed operations such as a program or erase cycle. Please refer to 
“Hold” on page 46 for additional details on the Hold operation. 

The HOLD pin is internally pulled-high and may be left floating if the Hold function will not be 
used. However, it is recommended that the HOLD pin also be externally connected to Vcc 
whenever possible. 


DEVICE POWER SUPPLY: The V¢, pin is used to supply the source voltage to the device. 


Vec Operations at invalid Voc voltages may produce spurious results and should not be : Power 
attempted. 





HOLD Low Input 











GND GROUND: The ground reference for the power supply. GND should be connected to the _ Beier 
system ground. 




















Figure 2-1. 8-SOIC (Top View) Figure 2-2. 8-UDFN (Top View) 
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3. Block Diagram 


Figure 3-1. Block Diagram 
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4. Memory Array 
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To provide the greatest flexibility, the memory array of the AT25DF161 can be erased in four lev- 
els of granularity including a full chip erase. In addition, the array has been divided into physical 
sectors of uniform size, of which each sector can be individually protected from program and 
erase operations. The size of the physical sectors is optimized for both code and data storage 
applications, allowing both code and data segments to reside in their own isolated regions. The 
Memory Architecture Diagram illustrates the breakdown of each erase level as well as the 


breakdown of each physical sector. 
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Figure 4-1. © Memory Architecture Diagram 


Block Erase Detail Page Program Detail 
Internal Sectoring for 64KB 32KB 4KB 1-256 Byte 
Protection, Lockdown, Block Erase Block Erase Block Erase Block Address Page Program Page Address 
and Suspend Functions (D8h Command) (52h Command) (20h Command) Range (02h Command) Range 


1FFFFFh — 1FFOOOh 256 Bytes 1FFFFFh — 1FFFOOh 


1FEFFFh — 1FE000h 256 Bytes 1FFEFFh — 1FFEOOh 
1FDFFFh — 1FD000h 256 Bytes 1FFDFFh — 1FFDOOh 


1FCFFFh — 1FC000h 256 Bytes 1FFCFFh — 1FFC0Oh 
1FBFFFh — 1FB000h 256 Bytes 1FFBFFh — 1FFBOOh 
1FAFFFh — 1FA000h 256 Bytes 1FFAFFh — 1FFAO0Oh 


1FOFFFh — 1F9000h 256 Bytes 1FFOFFh — 1FF900h 
64KB 1F8FFFh — 1F8000h 256 Bytes 1FF8FFh — 1FF800h 


(Sector 31) 1F7FFFh — 1F7000h 1FF7FFh — 1FF700h 
1F6FFFh — 1F6000h 1FF6FFh — 1FF600h 
1F5FFFh — 1F5000h 1FFSFFh — 1FF500h 
1F4FFFh — 1F4000h 1FF4FFh — 1FF400h 
1F3FFFh — 1F3000h 1FF3FFh — 1FF300h 
1F2FFFh — 1F2000h 1FF2FFh — 1FF200h 
1F1FFFh — 1F1000h 1FFIFFh — 1FF100h 
1FOFFFh — 1F0000h 1FFOFFh — 1FFOOOh 
1EFFFFh — 1EFO0Oh 1FEFFFh — 1FEFOOh 


1EEFFFh — 1EE000h 256 Bytes | 1FEEFFh — 1FEEOOh 
1EDFFFh — 1EDOO0h 256 Bytes | 1FEDFFh — 1FEDOOh 


1ECFFFh - 1EC000h 256 Bytes | 1FECFFh - 1FECOOh 
1EBFFFh — 1EB000h 256 Bytes | 1FEBFFh — 1FEBOOh 
1EAFFFh — 1EA000h 256 Bytes _| 1FEAFFh — 1FEAOOh 


1EQFFFh — 1E9000h 256 Bytes 1FE9FFh — 1FE900h 
64KB 1E8FFFh — 1E8000h 256 Bytes 1FE8FFh — 1FE800h 


(Sector 30) 1E7FFFh — 1E7000h 
1E6FFFh — 1E6000h 
1E5FFFh — 1E5000h 


1E4FFFh — 1E4000h 0017FFh — 001700h 
1E3FFFh — 1£3000h 0016FFh — 001600h 
1E2FFFh — 1E2000h 0015FFh — 001500h 
1E1FFFh — 1E1000h 0014FFh — 001400h 
1EOFFFh — 1E0000h 0013FFh — 001300h 
0012FFh — 001200h 
0011FFh — 001100h 
0010FFh — 001000h 


OOFFFFh — 00F000h OOOFFFh — 000FOOh 
OOEFFFh — OOE000h OOOEFFh — 000E00h 
OODFFFh — 00D000h OOODFFh — 000D00h 
OOCFFFh — 00C000h OOOCFFh — 000C00h 
OOBFFFh — 00B000h QOOBFFh — 000BO00h 
OOAFFFh — OOA000h OOOAFFh — 000A00h 
OO9FFFh — 009000h OOO9FFh — 000900h 

64KB OO8FFFh — 008000h 0008FFh — 000800h 
(Sector 0) 007FFFh - 007000h 0007FFh — 000700h 
OO6FFFh — 006000h O006FFh — 000600h 
OO5FFFh — 005000h O005FFh — 000500h 
OO4FFFh — 004000h 0004FFh — 000400h 
003FFFh — 003000h 0003FFh — 000300h 
002FFFh — 002000h 0002FFh — 000200h 


001FFFh — 001000h 256 Bytes 0001FFh — 000100h 
OOOFFFh — 000000h 256 Bytes OOOOFFh — 000000h 
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5. Device Operation 


The AT25DF161 is controlled by a set of instructions that are sent from a host controller, com- 
monly referred to as the SPI Master. The SPI Master communicates with the AT25DF 161 via the 
SPI bus which is comprised of four signal lines: Chip Select (CS), Serial Clock (SCK), Serial 
Input (SI), and Serial Output (SO). 


The AT25DF161 features a dual-input program mode in which the SO pin becomes an input. 
Similarly, the device also features a dual-output read mode in which the SI pin becomes an out- 
put. In the Dual-Input Byte/Page Program command description, the SO pin will be referred to as 
the SOI (Serial Output/Input) pin, and in the Dual-Output Read Array command, the SI pin will be 
referenced as the SIO (Serial Input/Output) pin. 


The SPI protocol defines a total of four modes of operation (mode 0, 1, 2, or 3) with each mode 
differing in respect to the SCK polarity and phase and how the polarity and phase control the 
flow of data on the SPI bus. The AT25DF161 supports the two most common modes, SPI 
Modes 0 and 3. The only difference between SPI Modes 0 and 3 is the polarity of the SCK signal 
when in the inactive state (when the SPI Master is in standby mode and not transferring any 
data). With SPI Modes 0 and 3, data is always latched in on the rising edge of SCK and always 
output on the falling edge of SCK. 


Figure 5-1. SPI Mode 0 and 3 





6. Commands and Addressing 
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A valid instruction or operation must always be started by first asserting the cs pin. After the cs 
pin has been asserted, the host controller must then clock out a valid 8-bit opcode on the SPI 
bus. Following the opcode, instruction dependent information such as address and data bytes 
would then be clocked out by the host controller. All opcode, address, and data bytes are trans- 
ferred with the most-significant bit (MSB) first. An operation is ended by deasserting the CS pin. 


Opcodes not supported by the AT25DF 161 will be ignored by the device and no operation will be 
started. The device will continue to ignore any data presented on the SI pin until the start of the 
next operation (CS pin being deasserted and then reasserted). In addition, if the cs pin is deas- 
serted before complete opcode and address information is sent to the device, then no operation 
will be performed and the device will simply return to the idle state and wait for the next 
operation. 


Addressing of the device requires a total of three bytes of information to be sent, representing 
address bits A23-A0. Since the upper address limit of the AT25DF161 memory array is 
1FFFFFh, address bits A23-A21 are always ignored by the device. 
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Table 6-1. Command Listing 
Clock Address | Dummy Data 
Command Opcode Frequency Bytes Bytes Bytes 
Read Commands 
1Bh 0001 1011 Up to 100 MHz 3 2 1+ 
Read Array OBh 0000 1011 Up to 85 MHz 3 1 1+ 
03h 0000 0011 Up to 50 MHz 3 0 1+ 
Dual-Output Read Array 3Bh 0011 1011 Up to 85 MHz 3 1 1+ 
Program and Erase Commands 
Block Erase (4 KBytes) 20h 0010 0000 Up to 100 MHz 3 0 0 
Block Erase (32 KBytes) 52h 0101 0010 Up to 100 MHz 3 0 0 
Block Erase (64 KBytes) D8h 1101 1000 Up to 100 MHz 3 0 0 
60h 0110 0000 Up to 100 MHz 0 0 0 
Chip Erase 
C7h 1100 0111 Up to 100 MHz 0 0 0 
Byte/Page Program (1 to 256 Bytes) 02h 0000 0010 Up to 100 MHz 3 0 1+ 
Dual-Input Byte/Page Program (1 to 256 Bytes) | A2h 1010 0010 Up to 100 MHz 3 0 1+ 
Program/Erase Suspend BOh 1011 0000 Up to 100 MHz 0 0 0 
Program/Erase Resume DOh 1101 0000 Up to 100 MHz 0 0 0 
Protection Commands 
Write Enable 06h 0000 0110 Up to 100 MHz 0 0 0 
Write Disable 04h 0000 0100 Up to 100 MHz 0 0 0 
Protect Sector 36h 0011 0110 Up to 100 MHz 3 0 0 
Unprotect Sector 39h 0011 1001 Up to 100 MHz 3 0 0 
Global Protect/Unprotect Use Write Status Register Byte 1 Command 
Read Sector Protection Registers 3Ch 0011 1100 Up to 100 MHz 3 0 1+ 
Security Commands 
Sector Lockdown 33h 0011 0011 Up to 100 MHz 3 0 1 
Freeze Sector Lockdown State 34h 0011 0100 Up to 100 MHz 3 0 1 
Read Sector Lockdown Registers 35h 0011 0101 Up to 100 MHz 3 0 1+ 
Program OTP Security Register 9Bh 1001 1011 Up to 100 MHz 3 0 1+ 
Read OTP Security Register 77h 0111 0111 Up to 100 MHz 3 2 1+ 
Status Register Commands 
Read Status Register 05h 0000 0101 Up to 100 MHz 0 0 1+ 
Write Status Register Byte 1 01h 0000 0001 Up to 100 MHz 0 0 1 
Write Status Register Byte 2 31h 0011 0001 Up to 100 MHz 0 0 1 
Miscellaneous Commands 
Reset FOh 1111 0000 Up to 100 MHz 0 0 1 
Read Manufacturer and Device ID 9Fh 1001 1111 Up to 85 MHz 0 0 1 to4 
Deep Power-Down B9h 1011 1001 Up to 100 MHz 0 0 0 
Resume from Deep Power-Down ABh 1010 1011 Up to 100 MHz 0 0 0 
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7. Read Commands 


7.1. Read Array 


The Read Array command can be used to sequentially read a continuous stream of data from 
the device by simply providing the clock signal once the initial starting address has been speci- 
fied. The device incorporates an internal address counter that automatically increments on every 
clock cycle. 


Three opcodes (1Bh, OBh, and 03h) can be used for the Read Array command. The use of each 
opcode depends on the maximum clock frequency that will be used to read data from the device. 
The OBh opcode can be used at any clock frequency up to the maximum specified by fo, ,, and 
the 03h opcode can be used for lower frequency read operations up to the maximum specified 
by frapie- The 1Bh opcode allows the highest read performance possible and can be used at any 
clock frequency up to the maximum specified by fy,,x; however, use of the 1Bh opcode at clock 
frequencies above fy; , should be reserved to systems employing the RapidS protocol. 


To perform the Read Array operation, the CS pin must first be asserted and the appropriate 
opcode (1Bh, OBh, or 03h) must be clocked into the device. After the opcode has been clocked 
in, the three address bytes must be clocked in to specify the starting address location of the first 
byte to read within the memory array. Following the three address bytes, additional dummy 
bytes may need to be clocked into the device depending on which opcode is used for the Read 
Array operation. If the 1Bh opcode is used, then two dummy bytes must be clocked into the 
device after the three address bytes. If the OBh opcode is used, then a single dummy byte must 
be clocked in after the address bytes. 


After the three address bytes (and the dummy bytes or byte if using opcodes 1Bh or OBh) have 
been clocked in, additional clock cycles will result in data being output on the SO pin. The data is 
always output with the MSB of a byte first. When the last byte (1FFFFFh) of the memory array 
has been read, the device will continue reading back at the beginning of the array (O00000h). No 
delays will be incurred when wrapping around from the end of the array to the beginning of the 
array. 


Deasserting the cs pin will terminate the read operation and put the SO pin into a high-imped- 
ance state. The CS pin can be deasserted at any time and does not require that a full byte of 
data be read. 


Figure 7-1. Read Array — 1Bh Opcode 
cs \ j 
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Figure 7-2. Read Array — OBh Opcode 
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Figure 7-3. Read Array — 03h Opcode 
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7.2. Dual-Output Read Array 


The Dual-Output Read Array command is similar to the standard Read Array command and can 
be used to sequentially read a continuous stream of data from the device by simply providing the 
clock signal once the initial starting address has been specified. Unlike the standard Read Array 
command, however, the Dual-Output Read Array command allows two bits of data to be clocked 
out of the device on every clock cycle rather than just one. 


The Dual-Output Read Array command can be used at any clock frequency up to the maximum 
specified by frnpo- To perform the Dual-Output Read Array operation, the CS pin must first be 
asserted and the opcode of 3Bh must be clocked into the device. After the opcode has been 
clocked in, the three address bytes must be clocked in to specify the starting address location of 
the first byte to read within the memory array. Following the three address bytes, a single 
dummy byte must also be clocked into the device. 


After the three address bytes and the dummy byte have been clocked in, additional clock cycles 
will result in data being output on both the SO and SIO pins. The data is always output with the 
MSB of a byte first, and the MSB is always output on the SO pin. During the first clock cycle, bit 
7 of the first data byte will be output on the SO pin while bit 6 of the same data byte will be output 
on the SIO pin. During the next clock cycle, bits 5 and 4 of the first data byte will be output on the 
SO and SIO pins, respectively. The sequence continues with each byte of data being output 
after every four clock cycles. When the last byte (1FFFFFh) of the memory array has been read, 
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the device will continue reading back at the beginning of the array (QO0000h). No delays will be 
incurred when wrapping around from the end of the array to the beginning of the array. 


Deasserting the CS pin will terminate the read operation and put the SO and SIO pins into a 
high-impedance state. The CS pin can be deasserted at any time and does not require that a full 
byte of data be read. 


Figure 7-4. Dual-Output Read Array 
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8. Program and Erase Commands 


8.1 


12 


Byte/Page Program 


The Byte/Page Program command allows anywhere from a single byte of data to 256 bytes of 
data to be programmed into previously erased memory locations. An erased memory location is 
one that has all eight bits set to the logical “1” state (a byte value of FFh). Before a Byte/Page 
Program command can be started, the Write Enable command must have been previously 
issued to the device (see “Write Enable” on page 21) to set the Write Enable Latch (WEL) bit of 
the Status Register to a logical “1” state. 


To perform a Byte/Page Program command, an opcode of 02h must be clocked into the device 
followed by the three address bytes denoting the first byte location of the memory array to begin 
programming at. After the address bytes have been clocked in, data can then be clocked into the 
device and will be stored in an internal buffer. 


If the starting memory address denoted by A23-A0 does not fall on an even 256-byte page 
boundary (A7-A0 are not all 0), then special circumstances regarding which memory locations to 
be programmed will apply. In this situation, any data that is sent to the device that goes beyond 
the end of the page will wrap around back to the beginning of the same page. For example, if the 
starting address denoted by A23-A0 is OOOOFEh, and three bytes of data are sent to the device, 
then the first two bytes of data will be programmed at addresses OOOOFEh and OOOOFFh while 
the last byte of data will be programmed at address 000000h. The remaining bytes in the page 
(addresses 000001h through OOOOFDh) will not be programmed and will remain in the erased 
state (FFh). In addition, if more than 256 bytes of data are sent to the device, then only the last 
256 bytes sent will be latched into the internal buffer. 


When the CS pin is deasserted, the device will take the data stored in the internal buffer and pro- 
gram it into the appropriate memory array locations based on the starting address specified by 
A23-A0 and the number of data bytes sent to the device. If less than 256 bytes of data were sent 
to the device, then the remaining bytes within the page will not be programmed and will remain 
in the erased state (FFh). The programming of the data bytes is internally self-timed and should 
take place in a time of tpp or tgp if only programming a single byte. 


The three address bytes and at least one complete byte of data must be clocked into the device 
before the CS pin is deasserted, and the CS pin must be deasserted on even byte boundaries 
(multiples of eight bits); otherwise, the device will abort the operation and no data will be pro- 
grammed into the memory array. In addition, if the address specified by A23-A0 points to a 
memory location within a sector that is in the protected state (see “Protect Sector” on page 22) 
or locked down (see “Sector Lockdown” on page 29), then the Byte/Page Program command will 
not be executed, and the device will return to the idle state once the CS pin has been deas- 
serted. The WEL bit in the Status Register will be reset back to the logical “O” state if the 
program cycle aborts due to an incomplete address being sent, an incomplete byte of data being 
sent, the CS pin being deasserted on uneven byte boundaries, or because the memory location 
to be programmed is protected or locked down. 


While the device is programming, the Status Register can be read and will indicate that the 
device is busy. For faster throughput, it is recommended that the Status Register be polled 
rather than waiting the tgp or tpp time to determine if the data bytes have finished programming. 
At some point before the program cycle completes, the WEL bit in the Status Register will be 
reset back to the logical “O” state. 


The device also incorporates an intelligent programming algorithm that can detect when a byte 
location fails to program properly. If a programming error arises, it will be indicated by the EPE 
bit in the Status Register. 
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Figure 8-1. Byte Program 
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Figure 8-2. Page Program 
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8.2. Dual-Input Byte/Page Program 
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The Dual-Input Byte/Page Program command is similar to the standard Byte/Page Program 
command and can be used to program anywhere from a single byte of data up to 256 bytes of 
data into previously erased memory locations. Unlike the standard Byte/Page Program com- 
mand, however, the Dual-Input Byte/Page Program command allows two bits of data to be 
clocked into the device on every clock cycle rather than just one. 


Before the Dual-Input Byte/Page Program command can be started, the Write Enable command 
must have been previously issued to the device (see “Write Enable” on page 21) to set the Write 
Enable Latch (WEL) bit of the Status Register to a logical “1” state. To perform a Dual-Input 
Byte/Page Program command, an opcode of A2h must be clocked into the device followed by 
the three address bytes denoting the first byte location of the memory array to begin program- 
ming at. After the address bytes have been clocked in, data can then be clocked into the device 
two bits at a time on both the SOI and SI pins. 


The data is always input with the MSB of a byte first, and the MSB is always input on the SOI 
pin. During the first clock cycle, bit 7 of the first data byte would be input on the SOI pin while bit 
6 of the same data byte would be input on the SI pin. During the next clock cycle, bits 5 and 4 of 
the first data byte would be input on the SOI and SI pins, respectively. The sequence would con- 
tinue with each byte of data being input after every four clock cycles. Like the standard 
Byte/Page Program command, all data clocked into the device is stored in an internal buffer. 


If the starting memory address denoted by A23-A0 does not fall on an even 256-byte page 
boundary (A7-A0 are not all 0), then special circumstances regarding which memory locations to 
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be programmed will apply. In this situation, any data that is sent to the device that goes beyond 
the end of the page will wrap around back to the beginning of the same page. For example, if the 
starting address denoted by A23-A0 is OOOOFEh, and three bytes of data are sent to the device, 
then the first two bytes of data will be programmed at addresses OOOOFEh and OOOOFFh while 
the last byte of data will be programmed at address 000000h. The remaining bytes in the page 
(addresses 000001h through OOOOFDh) will not be programmed and will remain in the erased 
state (FFh). In addition, if more than 256 bytes of data are sent to the device, then only the last 
256 bytes sent will be latched into the internal buffer. 


When the CS pin is deasserted, the device will take the data stored in the internal buffer and pro- 
gram it into the appropriate memory array locations based on the starting address specified by 
A23-A0 and the number of data bytes sent to the device. If less than 256 bytes of data were sent 
to the device, then the remaining bytes within the page will not be programmed and will remain 
in the erased state (FFh). The programming of the data bytes is internally self-timed and should 
take place in a time of tpp or tgp if only programming a single byte. 


The three address bytes and at least one complete byte of data must be clocked into the device 
before the CS pin is deasserted, and the cs pin must be deasserted on even byte boundaries 
(multiples of eight bits); otherwise, the device will abort the operation and no data will be pro- 
grammed into the memory array. In addition, if the address specified by A23-A0 points to a 
memory location within a sector that is in the protected state (see “Protect Sector” on page 22) 
or locked down (see “Sector Lockdown” on page 29), then the Byte/Page Program command will 
not be executed, and the device will return to the idle state once the CS pin has been deas- 
serted. The WEL bit in the Status Register will be reset back to the logical “O” state if the 
program cycle aborts due to an incomplete address being sent, an incomplete byte of data being 
sent, the CS pin being deasserted on uneven byte boundaries, or because the memory location 
to be programmed is protected or locked down. 


While the device is programming, the Status Register can be read and will indicate that the 
device is busy. For faster throughput, it is recommended that the Status Register be polled 
rather than waiting the tgp or tpp time to determine if the data bytes have finished programming. 
At some point before the program cycle completes, the WEL bit in the Status Register will be 
reset back to the logical “O” state. 


The device also incorporates an intelligent programming algorithm that can detect when a byte 
location fails to program properly. If a programming error arises, it will be indicated by the EPE 
bit in the Status Register. 


Figure 8-3. Dual-Input Byte Program 
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Figure 8-4. 
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A block of 4, 32, or 64 Kbytes can be erased (all bits set to the logical “1” state) in a single oper- 
ation by using one of three different opcodes for the Block Erase command. An opcode of 20h is 
used for a 4-Kbyte erase, an opcode of 52h is used for a 32-Kbyte erase, and an opcode of D8&h 
is used for a 64-Kbyte erase. Before a Block Erase command can be started, the Write Enable 
command must have been previously issued to the device to set the WEL bit of the Status Reg- 
ister to a logical “1” state. 


To perform a Block Erase, the CS pin must first be asserted and the appropriate opcode (20h, 
52h, or D&h) must be clocked into the device. After the opcode has been clocked in, the three 
address bytes specifying an address within the 4-, 32-, or 64-Kbyte block to be erased must be 
clocked in. Any additional data clocked into the device will be ignored. When the CS pin is deas- 
serted, the device will erase the appropriate block. The erasing of the block is internally self- 
timed and should take place in a time of tg xg. 


Since the Block Erase command erases a region of bytes, the lower order address bits do not 
need to be decoded by the device. Therefore, for a 4-Kbyte erase, address bits A11-A0 will be 
ignored by the device and their values can be either a logical “1” or “O”. For a 32-Kbyte erase, 
address bits A14-A0 will be ignored, and for a 64-Kbyte erase, address bits A15-A0 will be 
ignored by the device. Despite the lower order address bits not being decoded by the device, the 
complete three address bytes must still be clocked into the device before the CS pin is deas- 
serted, and the CS pin must be deasserted on an even byte boundary (multiples of eight bits); 
otherwise, the device will abort the operation and no erase operation will be performed. 


If the address specified by A23-A0 points to a memory location within a sector that is in the pro- 
tected or locked down state, then the Block Erase command will not be executed, and the device 
will return to the idle state once the CS pin has been deasserted. 


The WEL bit in the Status Register will be reset back to the logical “0” state if the erase cycle 
aborts due to an incomplete address being sent, the CS pin being deasserted on uneven byte 
boundaries, or because a memory location within the region to be erased is protected or locked 
down. 


While the device is executing a successful erase cycle, the Status Register can be read and will 
indicate that the device is busy. For faster throughput, it is recommended that the Status Regis- 
ter be polled rather than waiting the ty, ,«_ time to determine if the device has finished erasing. At 
some point before the erase cycle completes, the WEL bit in the Status Register will be reset 
back to the logical “0” state. 
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The device also incorporates an intelligent erase algorithm that can detect when a byte location 
fails to erase properly. If an erase error occurs, it will be indicated by the EPE bit in the Status 
Register. 


Figure 8-5. Block Erase 
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The entire memory array can be erased in a single operation by using the Chip Erase command. 
Before a Chip Erase command can be started, the Write Enable command must have been pre- 
viously issued to the device to set the WEL bit of the Status Register to a logical “1” state. 


Two opcodes, 60h and C7h, can be used for the Chip Erase command. There is no difference in 
device functionality when utilizing the two opcodes, so they can be used interchangeably. To 
perform a Chip Erase, one of the two opcodes (60h or C7h) must be clocked into the device. 
Since the entire memory array is to be erased, no address bytes need to be clocked into the 
device, and any data clocked in after the opcode will be ignored. When the CS pin is deas- 
serted, the device will erase the entire memory array. The erasing of the device is internally self- 
timed and should take place in a time of toype. 


The complete opcode must be clocked into the device before the cs pin is deasserted, and the 
CS pin must be deasserted on an even byte boundary (multiples of eight bits); otherwise, no 
erase will be performed. In addition, if any sector of the memory array is in the protected or 
locked down state, then the Chip Erase command will not be executed, and the device will return 
to the idle state once the CS pin has been deasserted. The WEL bit in the Status Register will be 
reset back to the logical “0” state if the CS pin is deasserted on uneven byte boundaries or if a 
sector is in the protected or locked down state. 


While the device is executing a successful erase cycle, the Status Register can be read and will 
indicate that the device is busy. For faster throughput, it is recommended that the Status Regis- 
ter be polled rather than waiting the tc p_ time to determine if the device has finished erasing. At 
some point before the erase cycle completes, the WEL bit in the Status Register will be reset 
back to the logical “0” state. 


The device also incorporates an intelligent erase algorithm that can detect when a byte location 
fails to erase properly. If an erase error occurs, it will be indicated by the EPE bit in the Status 
Register. 
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Figure 8-6. Chip Erase 
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Program/Erase Suspend 


In some code plus data storage applications, it is often necessary to process certain high-level 
system interrupts that require relatively immediate reading of code or data from the Flash mem- 
ory. In such an instance, it may not be possible for the system to wait the microseconds or 
milliseconds required for the Flash memory to complete a program or erase cycle. The Pro- 
gram/Erase Suspend command allows a program or erase operation in progress to a particular 
64-Kbyte sector of the Flash memory array to be suspended so that other device operations can 
be performed. For example, by suspending an erase operation to a particular sector, the system 
can perform functions such as a program or read operation within another 64-Kbyte sector in the 
device. Other device operations, such as a Read Status Register, can also be performed while a 
program or erase operation is suspended. Table 8-1 outlines the operations that are allowed and 
not allowed during a program or erase suspend. 


Since the need to suspend a program or erase operation is immediate, the Write Enable com- 
mand does not need to be issued prior to the Program/Erase Suspend command being issued. 
Therefore, the Program/Erase Suspend command operates independently of the state of the 
WEL bit in the Status Register. 


To perform a Program/Erase Suspend, the CS pin must first be asserted and the opcode of BOh 
must be clocked into the device. No address bytes need to be clocked into the device, and any 
data clocked in after the opcode will be ignored. When the CS pin is deasserted, the program or 
erase operation currently in progress will be suspended within a time of tsysp. The Program Sus- 
pend (PS) bit or the Erase Suspend (ES) bit in the Status Register will then be set to the logical 
“1” state to indicate that the program or erase operation has been suspended. In addition, the 
RDY/BSY bit in the Status Register will indicate that the device is ready for another operation. 
The complete opcode must be clocked into the device before the CS pin is deasserted, and the 
CS pin must be deasserted on an even byte boundary (multiples of eight bits); otherwise, no 
suspend operation will be performed. 


Read operations are not allowed to a 64-Kbyte sector that has had its program or erase opera- 
tion suspended. If a read is attempted to a suspended sector, then the device will output 
undefined data. Therefore, when performing a Read Array operation to an unsuspended sector 
and the device’s internal address counter increments and crosses the sector boundary to a sus- 
pended sector, the device will then start outputting undefined data continuously until the address 
counter increments and crosses a sector boundary to an unsuspended sector. 


A program operation is not allowed to a sector that has been erase suspended. If a program 
operation is attempted to an erase suspended sector, then the program operation will abort and 
the WEL bit in the Status Register will be reset back to the logical “0” state. Likewise, an erase 
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operation is not allowed to a sector that has been program suspended. If attempted, the erase 
operation will abort and the WEL bit in the Status Register will be reset to a logical “O” state. 


During an Erase Suspend, a program operation to a different 64-Kbyte sector can be started and 
subsequently suspended. This results in a simultaneous Erase Suspend/Program Suspend con- 
dition and will be indicated by the states of both the ES and PS bits in the Status Register being 
set to the logical “1” state. 


If a Reset operation (see “Reset” on page 42) is performed while a sector is erase suspended, 
the suspend operation will abort and the contents of the block in the suspended sector will be left 
in an undefined state. However, if a Reset is performed while a sector is program suspended, 
the suspend operation will abort but only the contents of the page that was being programmed 
and subsequently suspended will be undefined. The remaining pages in the 64-Kbyte sector will 
retain their previous contents. 


If an attempt is made to perform an operation that is not allowed during a program or erase sus- 
pend, such as a Protect Sector operation, then the device will simply ignore the opcode and no 
operation will be performed. The state of the WEL bit in the Status Register, as well as the SPRL 
(Sector Protection Registers Locked) and SLE (Sector Lockdown Enabled) bits, will not be 
affected. 
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Table 8-1. Operations Allowed and Not Allowed During a Program or Erase Suspend 
Operation During Operation During 
Command Program Suspend Erase Suspend 


Read Commands 























Read Array (All Opcodes) Allowed Allowed 
Program and Erase Commands 

Block Erase Not Allowed Not Allowed 

Chip Erase Not Allowed Not Allowed 

Byte/Page Program (All Opcodes) Not Allowed Allowed 

Program/Erase Suspend Not Allowed Allowed 

Program/Erase Resume Allowed Allowed 





Protection Commands 




















Write Enable Not Allowed Allowed 
Write Disable Not Allowed Allowed 
Protect Sector Not Allowed Not Allowed 
Unprotect Sector Not Allowed Not Allowed 
Global Protect/Unprotect Not Allowed Not Allowed 
Read Sector Protection Registers Allowed Allowed 





Security Commands 









































Sector Lockdown Not Allowed Not Allowed 
Freeze Sector Lockdown State Not Allowed Not Allowed 
Read Sector Lockdown Registers Allowed Allowed 
Program OTP Security Register Not Allowed Not Allowed 
Read OTP Security Register Allowed Allowed 
Status Register Commands 
Read Status Register Allowed Allowed 
Write Status Register (All Opcodes) Not Allowed Not Allowed 
Miscellaneous Commands 
Reset Allowed Allowed 
Read Manufacturer and Device ID Allowed Allowed 
Deep Power-Down Not Allowed Not Allowed 
Resume from Deep Power-Down Not Allowed Not Allowed 
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Figure 8-7. Program/Erase Suspend 
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Program/Erase Resume 


The Program/Erase Resume command allows a suspended program or erase operation to be 
resumed and continue programming a Flash page or erasing a Flash memory block where it left 
off. As with the Program/Erase Suspend command, the Write Enable command does not need 
to be issued prior to the Program/Erase Resume command being issued. Therefore, the Pro- 
gram/Erase Resume command operates independently of the state of the WEL bit in the Status 
Register. 


To perform a Program/Erase Resume, the cs pin must first be asserted and the opcode of DOh 
must be clocked into the device. No address bytes need to be clocked into the device, and any 
data clocked in after the opcode will be ignored. When the cs pin is deasserted, the program or 
erase operation currently suspended will be resumed within a time of tapes. The PS bit or the ES 
bit in the Status Register will then be reset back to the logical “O” state to indicate that the pro- 
gram or erase operation is no longer suspended. In addition, the RDY/BSY bit in the Status 
Register will indicate that the device is busy performing a program or erase operation. The com- 
plete opcode must be clocked into the device before the cs pin is deasserted, and the cs pin 
must be deasserted on an even byte boundary (multiples of eight bits); otherwise, no resume 
operation will be performed. 


During a simultaneous Erase Suspend/Program Suspend condition, issuing the Program/Erase 
Resume command will result in the program operation resuming first. After the program opera- 
tion has been completed, the Program/Erase Resume command must be issued again in order 
for the erase operation to be resumed. 


While the device is busy resuming a program or erase operation, any attempts at issuing the 
Program/Erase Suspend command will be ignored. Therefore, if a resumed program or erase 
operation needs to be subsequently suspended again, the system must either wait the entire 
tres time before issuing the Program/Erase Suspend command, or it must check the status of 
the RDY/BSY bit or the appropriate PS or ES bit in the Status Register to determine if the previ- 
ously suspended program or erase operation has resumed. 
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Figure 8-8. Program/Erase Resume 
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9. Protection Commands and Features 


9.1 Write Enable 
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The Write Enable command is used to set the Write Enable Latch (WEL) bit in the Status Regis- 
ter to a logical “1” state. The WEL bit must be set before a Byte/Page Program, erase, Protect 
Sector, Unprotect Sector, Sector Lockdown, Freeze Sector Lockdown State, Program OTP 
Security Register, or Write Status Register command can be executed. This makes the issuance 
of these commands a two step process, thereby reducing the chances of a command being 
accidentally or erroneously executed. If the WEL bit in the Status Register is not set prior to the 
issuance of one of these commands, then the command will not be executed. 


To issue the Write Enable command, the CS pin must first be asserted and the opcode of O6h 
must be clocked into the device. No address bytes need to be clocked into the device, and any 
data clocked in after the opcode will be ignored. When the cs pin is deasserted, the WEL bit in 
the Status Register will be set to a logical “1”. The complete opcode must be clocked into the 
device before the CS pin is deasserted, and the cs pin must be deasserted on an even byte 
boundary (multiples of eight bits); otherwise, the device will abort the operation and the state of 
the WEL bit will not change. 


Figure 9-1. Write Enable 
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Write Disable 
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The Write Disable command is used to reset the Write Enable Latch (WEL) bit in the Status Reg- 
ister to the logical "0" state. With the WEL bit reset, all Byte/Page Program, erase, Protect 
Sector, Unprotect Sector, Sector Lockdown, Freeze Sector Lockdown State, Program OTP 
Security Register, and Write Status Register commands will not be executed. Other conditions 
can also cause the WEL bit to be reset; for more details, refer to the WEL bit section of the Sta- 
tus Register description. 


To issue the Write Disable command, the CS pin must first be asserted and the opcode of 04h 
must be clocked into the device. No address bytes need to be clocked into the device, and any 
data clocked in after the opcode will be ignored. When the CS pin is deasserted, the WEL bit in 
the Status Register will be reset to a logical “O”. The complete opcode must be clocked into the 
device before the CS pin is deasserted, and the cs pin must be deasserted on an even byte 
boundary (multiples of eight bits); otherwise, the device will abort the operation and the state of 
the WEL bit will not change. 


Figure 9-2. Write Disable 
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Protect Sector 


Every physical 64-Kbyte sector of the device has a corresponding single-bit Sector Protection 
Register that is used to control the software protection of a sector. Upon device power-up, each 
Sector Protection Register will default to the logical “1” state indicating that all sectors are pro- 
tected and cannot be programmed or erased. 


Issuing the Protect Sector command to a particular sector address will set the corresponding 
Sector Protection Register to the logical “1” state. The following table outlines the two states of 
the Sector Protection Registers. 


Table 9-1. Sector Protection Register Values 





Value | Sector Protection Status 


0 Sector is unprotected and can be programmed and erased. 














1 Sector is protected and cannot be programmed or erased. This is the default state. 





Before the Protect Sector command can be issued, the Write Enable command must have been 
previously issued to set the WEL bit in the Status Register to a logical “1”. To issue the Protect 
Sector command, the CS pin must first be asserted and the opcode of 36h must be clocked into 
the device followed by three address bytes designating any address within the sector to be pro- 
tected. Any additional data clocked into the device will be ignored. When the cs pin is 
deasserted, the Sector Protection Register corresponding to the physical sector addressed by 
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A23-A0 will be set to the logical “1” state, and the sector itself will then be protected from pro- 
gram and erase operations. In addition, the WEL bit in the Status Register will be reset back to 
the logical “0” state. 


The complete three address bytes must be clocked into the device before the CS pin is deas- 
serted, and the CS pin must be deasserted on an even byte boundary (multiples of eight bits); 
otherwise, the device will abort the operation. When the device aborts the Protect Sector opera- 
tion, the state of the Sector Protection Register will be unchanged, and the WEL bit in the Status 
Register will be reset to a logical “0”. 


As a safeguard against accidental or erroneous protecting or unprotecting of sectors, the Sector 
Protection Registers can themselves be locked from updates by using the SPRL (Sector Protec- 
tion Registers Locked) bit of the Status Register (please refer to the Status Register description 
for more details). If the Sector Protection Registers are locked, then any attempts to issue the 
Protect Sector command will be ignored, and the device will reset the WEL bit in the Status Reg- 
ister back to a logical “0” and return to the idle state once the CS pin has been deasserted. 


Figure 9-3. Protect Sector 
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Unprotect Sector 


Issuing the Unprotect Sector command to a particular sector address will reset the correspond- 
ing Sector Protection Register to the logical “O” state (see Table 9-1 for Sector Protection 
Register values). Every physical sector of the device has a corresponding single-bit Sector Pro- 
tection Register that is used to control the software protection of a sector. 


Before the Unprotect Sector command can be issued, the Write Enable command must have 
been previously issued to set the WEL bit in the Status Register to a logical “1”. To issue the 
Unprotect Sector command, the cs pin must first be asserted and the opcode of 39h must be 
clocked into the device. After the opcode has been clocked in, the three address bytes designat- 
ing any address within the sector to be unprotected must be clocked in. Any additional data 
clocked into the device after the address bytes will be ignored. When the CS pin is deasserted, 
the Sector Protection Register corresponding to the sector addressed by A23-A0 will be reset to 
the logical “O” state, and the sector itself will be unprotected. In addition, the WEL bit in the Sta- 
tus Register will be reset back to the logical “O” state. 


The complete three address bytes must be clocked into the device before the CS pin is deas- 
serted, and the CS pin must be deasserted on an even byte boundary (multiples of eight bits); 
otherwise, the device will abort the operation, the state of the Sector Protection Register will be 
unchanged, and the WEL bit in the Status Register will be reset to a logical “O”. 
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As a safeguard against accidental or erroneous locking or unlocking of sectors, the Sector Pro- 
tection Registers can themselves be locked from updates by using the SPRL (Sector Protection 
Registers Locked) bit of the Status Register (please refer to the Status Register description for 
more details). If the Sector Protection Registers are locked, then any attempts to issue the 
Unprotect Sector command will be ignored, and the device will reset the WEL bit in the Status 
Register back to a logical “0” and return to the idle state once the CS pin has been deasserted. 


Figure 9-4. | Unprotect Sector 
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Global Protect/Unprotect 


The Global Protect and Global Unprotect features can work in conjunction with the Protect Sec- 
tor and Unprotect Sector functions. For example, a system can globally protect the entire 
memory array and then use the Unprotect Sector command to individually unprotect certain sec- 
tors and individually reprotect them later by using the Protect Sector command. Likewise, a 
system can globally unprotect the entire memory array and then individually protect certain sec- 
tors as needed. 


Performing a Global Protect or Global Unprotect is accomplished by writing a certain combina- 
tion of data to the Status Register using the Write Status Register Byte 1 command (see “Write 
Status Register Byte 1” on page 40 for command execution details). The Write Status Register 
command is also used to modify the SPRL (Sector Protection Registers Locked) bit to control 
hardware and software locking. 


To perform a Global Protect, the appropriate WP pin and SPRL conditions must be met, and the 
system must write a logical “1” to bits 5, 4, 3, and 2 of the first byte of the Status Register. Con- 
versely, to perform a Global Unprotect, the same WP and SPRL conditions must be met but the 
system must write a logical “O” to bits 5, 4, 3, and 2 of the first byte of the Status Register. Table 
9-2 details the conditions necessary for a Global Protect or Global Unprotect to be performed. 


Sectors that have been erase or program suspended must remain in the unprotected state. If a 
Global Protect operation is attempted while a sector is erase or program suspended, the protec- 
tion operation will abort, the protection states of all sectors in the Flash memory array will not 
change, and WEL bit in the Status Register will be reset back to a logical “0”. 
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Table 9-2. Valid SPRL and Global Protect/Unprotect Conditions 
New Write Status 
Register Byte 1 
Data 
oo Current New 
WP SPRL Bit SPRL 
State Value 76543210 Protection Operation Value 
0x0000xx Global Unprotect — all Sector Protection Registers reset to 0 0 
0x0001xx No change to current protection. 0 
No change to current protection. 0 
0x1110xx No change to current protection. 0 
0x1111xx Global Protect — all Sector Protection Registers set to 1 0 
0 0 
1x0000xx Global Unprotect — all Sector Protection Registers reset to 0 1 
1x0001xx No change to current protection. 1 
No change to current protection. 1 
1x1110xx No change to current protection. 1 
1x1111xx Global Protect — all Sector Protection Registers set to 1 1 
No change to the current protection level. All sectors currently 
protected will remain protected and all sectors currently unprotected 
will remain unprotected. 
0 1 XXXXXXXX The Sector Protection Registers are hard-locked and cannot be 
changed when the WP pin is LOW and the current state of SPRL is 1. 
Therefore, a Global Protect/Unprotect will not occur. In addition, the 
SPRL bit cannot be changed (the WP pin must be HIGH in order to 
change SPRL back to a 0). 
0x0000xx Global Unprotect — all Sector Protection Registers reset to 0 0 
0x0001xx No change to current protection. 0 
No change to current protection. 0 
0x1110xx No change to current protection. 0 
0x1111xx Global Protect — all Sector Protection Registers set to 1 0 
1 0 
1x0000xx Global Unprotect — all Sector Protection Registers reset to 0 1 
1x0001xx No change to current protection. 1 
No change to current protection. 1 
1x1110xx No change to current protection. 1 
1x1111xx Global Protect — all Sector Protection Registers set to 1 1 
0x0000xx No change to the current protection level. All sectors 0 
0x0001xx currently protected will remain protected, and all sectors 0 
currently unprotected will remain unprotected. 0 
0x1110xx 0 
Ox1111xx The Sector Protection Registers are soft-locked and cannot 0 
1 1 be changed when the current state of SPRL is 1. Therefore, 
1x0000xx a Global Protect/Unprotect will not occur. However, the 1 
1x0001xx SPRL bit can be changed back to a 0 from a 1 since the WP 1 
pin is HIGH. To perform a Global Protect/Unprotect, the 1 
1x1110xx Write Status Register command must be issued again after 1 
1x1111xx the SPRL bit has been changed from a 1 toa 0. 1 




















Essentially, if the SPRL bit of the Status Register is in the logical “0” state (Sector Protection 
Registers are not locked), then writing a 00h to the first byte of the Status Register will perform a 
Global Unprotect without changing the state of the SPRL bit. Similarly, writing a 7Fh to the first 
byte of the Status Register will perform a Global Protect and keep the SPRL bit in the logical “O” 
state. The SPRL bit can, of course, be changed to a logical “1” by writing an FFh if software-lock- 
ing or hardware-locking is desired along with the Global Protect. 
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If the desire is to only change the SPRL bit without performing a Global Protect or Global Unpro- 
tect, then the system can simply write a OFh to the first byte of the Status Register to change the 
SPRL bit from a logical “1” to a logical “O” provided the WP pin is deasserted. Likewise, the sys- 
tem can write an FOh to change the SPRL bit from a logical “O” to a logical “1” without affecting 
the current sector protection status (no changes will be made to the Sector Protection 
Registers). 


When writing to the first byte of the Status Register, bits 5, 4, 3, and 2 will not actually be modi- 
fied but will be decoded by the device for the purposes of the Global Protect and Global 
Unprotect functions. Only bit 7, the SPRL bit, will actually be modified. Therefore, when reading 
the first byte of the Status Register, bits 5, 4, 3, and 2 will not reflect the values written to them 
but will instead indicate the status of the WP pin and the sector protection status. Please refer to 
“Read Status Register” on page 35 and Table 11-1 on page 36 for details on the Status Register 
format and what values can be read for bits 5, 4, 3, and 2. 


Read Sector Protection Registers 


The Sector Protection Registers can be read to determine the current software protection status 
of each sector. Reading the Sector Protection Registers, however, will not determine the status 
of the WP pin. 


To read the Sector Protection Register for a particular sector, the cs pin must first be asserted 
and the opcode of 3Ch must be clocked in. Once the opcode has been clocked in, three address 
bytes designating any address within the sector must be clocked in. After the last address byte 
has been clocked in, the device will begin outputting data on the SO pin during every subse- 
quent clock cycle. The data being output will be a repeating byte of either FFh or 00h to denote 
the value of the appropriate Sector Protection Register. 


At clock frequencies above fc ,, the first byte of data output will not be valid. Therefore, if operat- 
ing at clock frequencies above fy, ,, at least two bytes of data must be clocked out from the 
device in order to determine the correct status of the appropriate Sector Protection Register. 
Table 9-3. Read Sector Protection Register — Output Data 

Output Data Sector Protection Register Value 


00h Sector Protection Register value is 0 (sector is unprotected). 











FFh Sector Protection Register value is 1 (sector is protected). 








Deasserting the cs pin will terminate the read operation and put the SO pin into a high-imped- 
ance state. The CS pin can be deasserted at any time and does not require that a full byte of 
data be read. 


In addition to reading the individual Sector Protection Registers, the Software Protection Status 
(SWP) bits in the Status Register can be read to determine if all, some, or none of the sectors 
are software protected (refer to “Read Status Register” on page 35 for more details). 
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Figure 9-5. Read Sector Protection Register 
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9.7 Protected States and the Write Protect (WP) Pin 
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The WP pin is not linked to the memory array itself and has no direct effect on the protection sta- 
tus or lockdown status of the memory array. Instead, the WP pin, in conjunction with the SPRL 
(Sector Protection Registers Locked) bit in the Status Register, is used to control the hardware 
locking mechanism of the device. For hardware locking to be active, two conditions must be met- 
the WP pin must be asserted and the SPRL bit must be in the logical “1” state. 


When hardware locking is active, the Sector Protection Registers are locked and the SPRL bit 
itself is also locked. Therefore, sectors that are protected will be locked in the protected state, 
and sectors that are unprotected will be locked in the unprotected state. These states cannot be 
changed as long as hardware locking is active, so the Protect Sector, Unprotect Sector, and 
Write Status Register commands will be ignored. In order to modify the protection status of a 
sector, the WP pin must first be deasserted, and the SPRL bit in the Status Register must be 
reset back to the logical “O” state using the Write Status Register command. When resetting the 
SPRL bit back to a logical “0”, it is not possible to perform a Global Protect or Global Unprotect 
at the same time since the Sector Protection Registers remain soft-locked until after the Write 
Status Register command has been executed. 


If the WP pin is permanently connected to GND, then once the SPRL bit is set to a logical “1”, 
the only way to reset the bit back to the logical “O” state is to power-cycle the device. This allows 
a system to power-up with all sectors software protected but not hardware locked. Therefore, 
sectors can be unprotected and protected as needed and then hardware locked at a later time 
by simply setting the SPRL bit in the Status Register. 


When the WP pin is deasserted, or if the WP pin is permanently connected to Voc, the SPRL bit 
in the Status Register can still be set to a logical “1” to lock the Sector Protection Registers. This 
provides a software locking ability to prevent erroneous Protect Sector or Unprotect Sector com- 
mands from being processed. When changing the SPRL bit to a logical “1” from a logical “O”, it is 
also possible to perform a Global Protect or Global Unprotect at the same time by writing the 
appropriate values into bits 5, 4, 3, and 2 of the first byte of the Status Register. 


Tables 9-4 and 9-5 detail the various protection and locking states of the device. 


AIMED 2 





AIMED 


Table 9-4. Sector Protection Register States 








—. Sector Protection Register Sector 
WP n(?) n) 
xX 0 Unprotected 
(Don't Care) 1 Protected 














Note: 1. “n’ represents a sector number 


Table 9-5. Hardware and Software Locking 





we SPRL | Locking | SPRL Change Allowed Sector Protection Registers 


Unlocked and modifiable using the 
Protect and Unprotect Sector commands. 
Global Protect and Unprotect can also be 
performed. 


0 0 Can be modified from 0 to 1 





Locked in current state. Protect and 
0 1 Hardware Deckad Unprotect Sector commands will be 
Locked ignored. Global Protect and Unprotect 


cannot be performed. 





Unlocked and modifiable using the 
Protect and Unprotect Sector commands. 
Global Protect and Unprotect can also be 
performed. 


1 0 Can be modified from 0 to 1 





Locked in current state. Protect and 
Software . Unprotect Sector commands will be 
i: fl Locked Can Dermodiied legen 110.0 ignored. Global Protect and Unprotect 


cannot be performed. 
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10. Security Commands 


10.1 Sector Lockdown 

Certain applications require that portions of the Flash memory array be permanently protected 
against malicious attempts at altering program code, data modules, security information, or 
encryption/decryption algorithms, keys, and routines. To address these applications, the device 
incorporates a sector lockdown mechanism that allows any combination of individual 64-Kbyte 
sectors to be permanently locked so that they become read only. Once a sector is locked down, 
it can never be erased or programmed again, and it can never be unlocked from the locked 
down state. 


Each 64-Kbyte physical sector has a corresponding single-bit Sector Lockdown Register that is 
used to control the lockdown status of that sector. These registers are nonvolatile and will retain 
their state even after a device power-cycle or reset operation. The following table outlines the 
two states of the Sector Lockdown Registers. 


Table 10-1. | Sector Lockdown Register Values 





Value | Sector Lockdown Status 


0 Sector is not locked down and can be programmed and erased. This is the default state. 





1 Sector is permanently locked down and can never be programmed or erased again. 














Issuing the Sector Lockdown command to a particular sector address will set the corresponding 
Sector Lockdown Register to the logical “1” state. Each Sector Lockdown Register can only be 
set once; therefore, once set to the logical “1” state, a Sector Lockdown Register cannot be reset 
back to the logical “0” state. 


Before the Sector Lockdown command can be issued, the Write Enable command must have 
been previously issued to set the WEL bit in the Status Register to a logical “1”. In addition, the 
Sector Lockdown Enabled (SLE) bit in the Status Register must have also been previously set to 
the logical “1” state by using the Write Status Register Byte 2 command (see “Write Status Reg- 
ister Byte 2” on page 41). To issue the Sector Lockdown command, the cs pin must first be 
asserted and the opcode of 33h must be clocked into the device followed by three address bytes 
designating any address within the 64-Kbyte sector to be locked down. After the three address 
bytes have been clocked in, a confirmation byte of DOh must also be clocked in immediately fol- 
lowing the three address bytes. Any additional data clocked into the device after the first byte of 
data will be ignored. When the CS pin is deasserted, the Sector Lockdown Register correspond- 
ing to the sector addressed by A23-A0 will be set to the logical “1” state, and the sector itself will 
then be permanently locked down from program and erase operations within a time of tog. In 
addition, the WEL bit in the Status Register will be reset back to the logical “O” state. 


The complete three address bytes and the correct confirmation byte value of DOh must be 
clocked into the device before the CS pin is deasserted, and the cs pin must be deasserted on 
an even byte boundary (multiples of eight bits); otherwise, the device will abort the operation. 
When the device aborts the Sector Lockdown operation, the state of the corresponding Sector 
Lockdown Register as well as the SLE bit in the Status Register will be unchanged; however, the 
WEL bit in the Status Register will be reset to a logical “O”. 


As a safeguard against accidental or erroneous locking down of sectors, the Sector Lockdown 
command can be enabled and disabled as needed by using the SLE bit in the Status Register. 
In addition, the current sector lockdown state can be frozen so that no further modifications to 
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the Sector Lockdown Registers can be made (see “Freeze Sector Lockdown State” below). If 
the Sector Lockdown command is disabled or if the sector lockdown state is frozen, then any 
attempts to issue the Sector Lockdown command will be ignored, and the device will reset the 
WEL bit in the Status Register back to a logical “O” and return to the idle state once the CS pin 
has been deasserted. 


Figure 10-1. Sector Lockdown 
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10.2 Freeze Sector Lockdown State 


30 


The current sector lockdown state can be permanently frozen so that no further modifications to 
the Sector Lockdown Registers can be made; therefore, the Sector Lockdown command will be 
permanently disabled, and no additional sectors can be locked down aside from those already 
locked down. Any attempts to issue the Sector Lockdown command after the sector lockdown 
state has been frozen will be ignored. 


Before the Freeze Sector Lockdown State command can be issued, the Write Enable command 
must have been previously issued to set the WEL bit in the Status Register to a logical “1”. In 
addition, the Sector Lockdown Enabled (SLE) bit in the Status Register must have also been 
previously set to the logical “1” state. To issue the Freeze Sector Lockdown State command, the 
cs pin must first be asserted and the opcode of 34h must be clocked into the device followed by 
three command specific address bytes of 55AA40h. After the three address bytes have been 
clocked in, a confirmation byte of DOh must be clocked in immediately following the three 
address bytes. Any additional data clocked into the device will be ignored. When the CS pin is 
deasserted, the current sector lockdown state will be permanently frozen within a time of t. ocx. 
In addition, the WEL bit in the Status Register will be reset back to the logical “O” state, and the 
SLE bit will be permanently reset to a logical “O” to indicate that the Sector Lockdown command 
is permanently disabled. 


The complete and correct three address bytes and the confirmation byte must be clocked into 
the device before the CS pin is deasserted, and the cs pin must be deasserted on an even byte 
boundary (multiples of eight bits); otherwise, the device will abort the operation. When the 
device aborts the Freeze Sector Lockdown State operation, the WEL bit in the Status Register 
will be reset to a logical “0”; however, the state of the SLE bit will be unchanged. 
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Figure 10-2. Freeze Sector Lockdown State 
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10.3 Read Sector Lockdown Registers 

The Sector Lockdown Registers can be read to determine the current lockdown status of each 
physical 64-Kbyte sector. To read the Sector Lockdown Register for a particular 64-Kbyte sec- 
tor, the CS pin must first be asserted and the opcode of 35h must be clocked in. Once the 
opcode has been clocked in, three address bytes designating any address within the 64-Kbyte 
sector must be clocked in. After the address bytes have been clocked in, data will be output on 
the SO pin during every subsequent clock cycle. The data being output will be a repeating byte 
of either FFh or 00h to denote the value of the appropriate Sector Lockdown Register. 


At clock frequencies above fy, ,, the first byte of data output will not be valid. Therefore, if operat- 
ing at clock frequencies above fy ,, at least two bytes of data must be clocked out from the 
device in order to determine the correct status of the appropriate Sector Lockdown Register. 


Table 10-2. Read Sector Lockdown Register — Output Data 


Output Data Sector Lockdown Register Value 


00h Sector Lockdown Register value is 0 (sector is not locked down). 





FFh Sector Lockdown Register value is 1 (sector is permanently locked down). 


Deasserting the cs pin will terminate the read operation and put the SO pin into a high-imped- 
ance state. The CS pin can be deasserted at any time and does not require that a full byte of 
data be read. 


Figure 10-3. Read Sector Lockdown Register 
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10.4 Program OTP Security Register 

The device contains a specialized OTP (One-Time Programmable) Security Register that can be 
used for purposes such as unique device serialization, system-level Electronic Serial Number 
(ESN) storage, locked key storage, etc. The OTP Security Register is independent of the main 
Flash memory array and is comprised of a total of 128 bytes of memory divided into two por- 
tions. The first 64 bytes (byte locations 0 through 63) of the OTP Security Register are allocated 
as a one-time user-programmable space. Once these 64 bytes have been programmed, they 
cannot be erased or reprogrammed. The remaining 64 bytes of the OTP Security Register (byte 
locations 64 through 127) are factory programmed by Atmel and will contain a unique value for 
each device. The factory programmed data is fixed and cannot be changed. 


Table 10-3. OTP Security Register 


Security Register 
Byte Number 


0 1 — 62 63 64 65 as 126 127 





One-Time User Programmable Factory Programmed by Atmel 














The user-programmable portion of the OTP Security Register does not need to be erased before 
it is programmed. In addition, the Program OTP Security Register command operates on the 
entire 64-byte user-programmable portion of the OTP Security Register at one time. Once the 
user-programmable space has been programmed with any number of bytes, the user-program- 
mable space cannot be programmed again; therefore, it is not possible to only program the first 
two bytes of the register and then program the remaining 62 bytes at a later time. 


Before the Program OTP Security Register command can be issued, the Write Enable command 
must have been previously issued to set the WEL bit in the Status Register to a logical “1”. To 
program the OTP Security Register, the CS pin must first be asserted and an opcode of 9Bh 
must be clocked into the device followed by the three address bytes denoting the first byte loca- 
tion of the OTP Security Register to begin programming at. Since the size of the user- 
programmable portion of the OTP Security Register is 64 bytes, the upper order address bits do 
not need to be decoded by the device. Therefore, address bits A23-A6 will be ignored by the 
device and their values can be either a logical “1” or “O”. After the address bytes have been 
clocked in, data can then be clocked into the device and will be stored in the internal buffer. 


If the starting memory address denoted by A23-A0 does not start at the beginning of the OTP 
Security Register memory space (A5-A0 are not all 0), then special circumstances regarding 
which OTP Security Register locations to be programmed will apply. In this situation, any data 
that is sent to the device that goes beyond the end of the 64-byte user-programmable space will 
wrap around back to the beginning of the OTP Security Register. For example, if the starting 
address denoted by A23-A0 is OOO03Eh, and three bytes of data are sent to the device, then the 
first two bytes of data will be programmed at OTP Security Register addresses 00003Eh and 
00003Fh while the last byte of data will be programmed at address 000000h. The remaining 
bytes in the OTP Security Register (addresses 000001h through 00003Dh) will not be pro- 
grammed and will remain in the erased state (FFh). In addition, if more than 64 bytes of data are 
sent to the device, then only the last 64 bytes sent will be latched into the internal buffer. 


When the CS pin is deasserted, the device will take the data stored in the internal buffer and pro- 
gram it into the appropriate OTP Security Register locations based on the starting address 
specified by A23-A0 and the number of data bytes sent to the device. If less than 64 bytes of 
data were sent to the device, then the remaining bytes within the OTP Security Register will not 
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be programmed and will remain in the erased state (FFh). The programming of the data bytes is 
internally self-timed and should take place in a time of toqpp. It is not possible to suspend the 
programming of the OTP Security Register. 


The three address bytes and at least one complete byte of data must be clocked into the device 
before the CS pin is deasserted, and the CS pin must be deasserted on even byte boundaries 
(multiples of eight bits); otherwise, the device will abort the operation and the user-programma- 
ble portion of the OTP Security Register will not be programmed. The WEL bit in the Status 
Register will be reset back to the logical “O” state if the OTP Security Register program cycle 
aborts due to an incomplete address being sent, an incomplete byte of data being sent, the cs 
pin being deasserted on uneven byte boundaries, or because the user-programmable portion of 
the OTP Security Register was previously programmed. 


While the device is programming the OTP Security Register, the Status Register can be read 
and will indicate that the device is busy. For faster throughput, it is recommended that the Status 
Register be polled rather than waiting the tozpp time to determine if the data bytes have finished 
programming. At some point before the OTP Security Register programming completes, the 
WEL bit in the Status Register will be reset back to the logical “0” state. 


If the device is powered-down during the OTP Security Register program cycle, then the con- 
tents of the 64-byte user programmable portion of the OTP Security Register cannot be 
guaranteed and cannot be programmed again. 


The Program OTP Security Register command utilizes the internal 256-buffer for processing. 
Therefore, the contents of the buffer will be altered from its previous state when this command is 
issued. 


Figure 10-4. Program OTP Security Register 
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10.5 Read OTP Security Register 


The OTP Security Register can be sequentially read in a similar fashion to the Read Array oper- 
ation up to the maximum clock frequency specified by fyy,x. To read the OTP Security Register, 
the CS pin must first be asserted and the opcode of 77h must be clocked into the device. After 
the opcode has been clocked in, the three address bytes must be clocked in to specify the start- 
ing address location of the first byte to read within the OTP Security Register. Following the 
three address bytes, two dummy bytes must be clocked into the device before data can be 
output. 


After the three address bytes and the dummy bytes have been clocked in, additional clock 
cycles will result in OTP Security Register data being output on the SO pin. When the last byte 
(00007Fh) of the OTP Security Register has been read, the device will continue reading back at 
the beginning of the register (Q00000h). No delays will be incurred when wrapping around from 
the end of the register to the beginning of the register. 


Deasserting the cs pin will terminate the read operation and put the SO pin into a high-imped- 
ance state. The CS pin can be deasserted at any time and does not require that a full byte of 
data be read. 


Figure 10-5. Read OTP Security Register 
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11. Status Register Commands 


11.1 Read Status Register 
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The two-byte Status Register can be read to determine the device’s ready/busy status, as well 
as the status of many other functions such as Hardware Locking and Software Protection. The 
Status Register can be read at any time, including during an internally self-timed program or 
erase operation. 


To read the Status Register, the CS pin must first be asserted and the opcode of 05h must be 
clocked into the device. After the opcode has been clocked in, the device will begin outputting 
Status Register data on the SO pin during every subsequent clock cycle. After the second byte 
of the Status Register has been clocked out, the sequence will repeat itself starting again with 
the first byte of the Status Register as long as the cs pin remains asserted and the clock pin is 
being pulsed. The data in the Status Register is constantly being updated, so each repeating 
sequence will output new data. The RDY/BSY status is available for both bytes of the Status 
Register and is updated for each byte. 


At clock frequencies above f,,,, the first two bytes of data output from the Status Register will 
not be valid. Therefore, if operating at clock frequencies above f,,,, at least four bytes of data 
must be clocked out from the device in order to read the correct values of both bytes of the Sta- 
tus Register. 


Deasserting the cs pin will terminate the Read Status Register operation and put the SO pin 
into a high-impedance state. The CS pin can be deasserted at any time and does not require 
that a full byte of data be read. 
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Table 11-1. Status Register Format — Byte 1 















































Bit” Name Type® Description 
0 Sector Protection Registers are unlocked (default). 
7 SPRL Sector Protection Registers Locked R/W 
1 Sector Protection Registers are locked. 
6 RES Reserved for future use R 0 Reserved for future use. 
0 Erase or program operation was successful. 
5 EPE Erase/Program Error R 
1 Erase or program error detected. 
=a 0 | WPis asserted. 
4 WPP Write Protect (WP) Pin Status R —— 
1 WP is deasserted. 
All sectors are software unprotected (all Sector 
00 P : 
Protection Registers are 0). 
Some sectors are software protected. Read 
01 individual Sector Protection Registers to determine 
3:2 SWP Software Protection Status R which sectors are protected. 
10 Reserved for future use. 
11 All sectors are software protected (all Sector 
Protection Registers are 1 — default). 
0 Device is not write enabled (default). 
1 WEL Write Enable Latch Status R 
1 Device is write enabled. 
0 Device is ready. 
0 RDY/BSY | Ready/Busy Status R 
1 Device is busy with an internal operation. 


























Notes: 1. Only bit 7 of Status Register Byte 1 will be modified when using the Write Status Register Byte 1 command. 


2. R/W = Readable and writeable 
R = Readable only 
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Table 11-2. Status Register Format — Byte 2 
Bit” Name Type” Description 
7 RES Reserved for future use R 0 Reserved for future use. 
6 RES Reserved for future use R 0 Reserved for future use. 
5 RES Reserved for future use R 0 Reserved for future use. 
0 Reset command is disabled (default). 
4 RSTE Reset Enabled R/W 
1 Reset command is enabled. 
Sector Lockdown and Freeze Sector Lockdown State 
0 : 
commands are disabled (default). 
3 SLE Sector Lockdown Enabled R/W 
1 Sector Lockdown and Freeze Sector Lockdown State 
commands are enabled. 
0 No sectors are program suspended (default). 
2 PS Program Suspend Status R 
1 A sector is program suspended. 
0 No sectors are erase suspended (default). 
1 ES Erase Suspend Status R 
1 A sector is erase suspended. 
0 Device is ready. 
0 RDY/BSY | Ready/Busy Status R 
1 Device is busy with an internal operation. 
Notes: 1. Only bits 4 and 3 of Status Register Byte 2 will be modified when using the Write Status Register Byte 2 command. 


11.1.1 


11.1.2 





2. R/W = Readable and writeable 
R = Readable only 


SPRL Bit 


EPE Bit 
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The SPRL bit is used to control whether the Sector Protection Registers can be modified or not. 
When the SPRL bit is in the logical “1” state, all Sector Protection Registers are locked and can- 
not be modified with the Protect Sector and Unprotect Sector commands (the device will ignore 
these commands). In addition, the Global Protect and Global Unprotect features cannot be per- 
formed. Any sectors that are presently protected will remain protected, and any sectors that are 
presently unprotected will remain unprotected. 


When the SPRL bit is in the logical “O” state, all Sector Protection Registers are unlocked and 
can be modified (the Protect Sector and Unprotect Sector commands, as well as the Global Pro- 
tect and Global Unprotect features, will be processed as normal). The SPRL bit defaults to the 
logical “O” state after device power-up. The Reset command has no effect on the SPRL bit. 


The SPRL bit can be modified freely whenever the WP pin is deasserted. However, if the WP pin 
is asserted, then the SPRL bit may only be changed from a logical “0” (Sector Protection Regis- 
ters are unlocked) to a logical “1” (Sector Protection Registers are locked). In order to reset the 
SPRL bit back to a logical “O” using the Write Status Register Byte 1 command, the WP pin will 
have to first be deasserted. 


The SPRL bit is the only bit of Status Register Byte 1 that can be user modified via the Write Sta- 
tus Register Byte 1 command. 


The EPE bit indicates whether the last erase or program operation completed successfully or 
not. If at least one byte during the erase or program operation did not erase or program properly, 
then the EPE bit will be set to the logical “1” state. The EPE bit will not be set if an erase or pro- 
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11.1.3 


11.1.4 


11.1.5 


11.1.6 
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WPP Bit 


SWP Bits 


WEL Bit 


RSTE Bit 
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gram operation aborts for any reason such as an attempt to erase or program a protected region 
or a locked down sector, an attempt to erase or program a suspended sector, or if the WEL bit is 
not set prior to an erase or program operation. The EPE bit will be updated after every erase and 
program operation. 


The WPP bit can be read to determine if the WP pin has been asserted or not. 


The SWP bits provide feedback on the software protection status for the device. There are three 
possible combinations of the SWP bits that indicate whether none, some, or all of the sectors 
have been protected using the Protect Sector command or the Global Protect feature. If the 
SWP bits indicate that some of the sectors have been protected, then the individual Sector Pro- 
tection Registers can be read with the Read Sector Protection Registers command to determine 
which sectors are in fact protected. 


The WEL bit indicates the current status of the internal Write Enable Latch. When the WEL bit is 
in the logical “O” state, the device will not accept any Byte/Page Program, erase, Protect Sector, 
Unprotect Sector, Sector Lockdown, Freeze Sector Lockdown State, Program OTP Security 
Register, or Write Status Register commands. The WEL bit defaults to the logical “0” state after 
a device power-up or reset operation. In addition, the WEL bit will be reset to the logical “O” state 
automatically under the following conditions: 

« Write Disable operation completes successfully 

¢ Write Status Register operation completes successfully or aborts 

¢ Protect Sector operation completes successfully or aborts 

¢ Unprotect Sector operation completes successfully or aborts 

« Sector Lockdown operation completes successfully or aborts 

¢ Freeze Sector Lockdown State operation completes successfully or aborts 

¢ Program OTP Security Register operation completes successfully or aborts 

* Byte/Page Program operation completes successfully or aborts 

¢ Block Erase operation completes successfully or aborts 

¢ Chip Erase operation completes successfully or aborts 

* Hold condition aborts 


If the WEL bit is in the logical “1” state, it will not be reset to a logical “O” if an operation aborts 
due to an incomplete or unrecognized opcode being clocked into the device before the cs pin is 
deasserted. In order for the WEL bit to be reset when an operation aborts prematurely, the entire 
opcode for a Byte/Page Program, erase, Protect Sector, Unprotect Sector, Sector Lockdown, 
Freeze Sector Lockdown State, Program OTP Security Register, or Write Status Register com- 
mand must have been clocked into the device. 


The RSTE bit is used to enable or disable the Reset command. When the RSTE bit is in the log- 
ical “O” state (the default state after power-up), the Reset command is disabled and any attempts 
to reset the device using the Reset command will be ignored. When the RSTE bit is in the logical 
“1” state, the Reset command is enabled. 
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11.1.7 SLE Bit 


11.1.8 PS Bit 


11.1.9 ES Bit 


11.1.10 RDY/BSY Bit 


The RSTE bit will retain its state as long as power is applied to the device. Once set to the logi- 
cal “1” state, the RSTE bit will remain in that state until it is modified using the Write Status 
Register Byte 2 command or until the device has been power cycled. The Reset command itself 
will not change the state of the RSTE bit. 


The SLE bit is used to enable and disable the Sector Lockdown and Freeze Sector Lockdown 
State commands. When the SLE bit is in the logical “O” state (the default state after power-up), 
the Sector Lockdown and Freeze Sector Lockdown commands are disabled. If the Sector Lock- 
down and Freeze Sector Lockdown commands are disabled, then any attempts to issue the 
commands will be ignored. This provides a safeguard for these commands against accidental or 
erroneous execution. When the SLE bit is in the logical “1” state, the Sector Lockdown and 
Freeze Sector Lockdown State commands are enabled. 


Unlike the WEL bit, the SLE bit does not automatically reset after certain device operations. 
Therefore, once set, the SLE bit will remain in the logical “1” state until it is modified using the 
Write Status Register Byte 2 command or until the device has been power cycled. The Reset 
command has no effect on the SLE bit. 


If the Freeze Sector Lockdown State command has been issued, then the SLE bit will be perma- 
nently reset in the logical “O” state to indicate that the Sector Lockdown command has been 
disabled. 


The PS bit indicates whether or not a sector is in the Program Suspend state. 


The ES bit indicates whether or not a sector is in the Erase Suspend state. 


The RDY/BSY bit is used to determine whether or not an internal operation, such as a program 
or erase, is in progress. To poll the RDY/BSY bit to detect the completion of a program or erase 
cycle, new Status Register data must be continually clocked out of the device until the state of 
the RDY/BSY bit changes from a logical “1” to a logical “O”. 


Figure 11-1. Read Status Register 





012 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 
4 





(XXXXAXKXXAXAXAXAAXAXAXAAXAXAXAARAXAKAAKARAXAAKAKAND 


STATUS REGISTER STATUS REGISTER STATUS REGISTER 





& HIGH-IMPEDANCE OOM OOO ONION IOODO 





3687C—DFLASH-7/09 


AIMED s 





AIMED 


11.2 Write Status Register Byte 1 


The Write Status Register Byte 1 command is used to modify the SPRL bit of the Status Regis- 
ter and/or to perform a Global Protect or Global Unprotect operation. Before the Write Status 
Register Byte 1 command can be issued, the Write Enable command must have been previ- 
ously issued to set the WEL bit in the Status Register to a logical “1”. 


To issue the Write Status Register Byte 1 command, the CS pin must first be asserted and the 
opcode of 01h must be clocked into the device followed by one byte of data. The one byte of 
data consists of the SPRL bit value, a don’t care bit, four data bits to denote whether a Global 
Protect or Unprotect should be performed, and two additional don’t care bits (see Table 11-3). 
Any additional data bytes that are sent to the device will be ignored. When the CS pin is deas- 
serted, the SPRL bit in the Status Register will be modified, and the WEL bit in the Status 
Register will be reset back to a logical “0”. The values of bits 5, 4, 3, and 2 and the state of the 
SPRL bit before the Write Status Register Byte 1 command was executed (the prior state of the 
SPRL bit) will determine whether or not a Global Protect or Global Unprotect will be performed. 
Please refer to “Global Protect/Unprotect” on page 24 for more details. 


The complete one byte of data must be clocked into the device before the CS pin is deasserted, 
and the CS pin must be deasserted on even byte boundaries (multiples of eight bits); otherwise, 
the device will abort the operation, the state of the SPRL bit will not change, no potential Global 
Protect or Unprotect will be performed, and the WEL bit in the Status Register will be reset back 
to the logical “O” state. 


If the WP. pin is asserted, then the SPRL bit can only be set to a logical “1”. If an attempt is made 
to reset the SPRL bit to a logical “O” while the WP pin is asserted, then the Write Status Register 
Byte 1 command will be ignored, and the WEL bit in the Status Register will be reset back to the 
logical “0” state. In order to reset the SPRL bit to a logical “0”, the WP pin must be deasserted. 


Table 11-3. Write Status Register Byte 1 Format 


eS eee 


SPRL Global Protect/Unprotect 





Figure 11-2. Write Status Register Byte 1 
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11.3. Write Status Register Byte 2 
The Write Status Register Byte 2 command is used to modify the RSTE and SLE bits of the Sta- 
tus Register. Using the Write Status Register Byte 2 command is the only way to modify the 
RSTE and SLE bits in the Status Register during normal device operation, and the SLE bit can 
only be modified if the sector lockdown state has not been frozen. Before the Write Status Reg- 
ister Byte 2 command can be issued, the Write Enable command must have been previously 
issued to set the WEL bit in the Status Register to a logical “1”. 


To issue the Write Status Register Byte 2 command, the CS pin must first be asserted and the 
opcode of 31h must be clocked into the device followed by one byte of data. The one byte of 
data consists of three don’t care bits, the RSTE bit value, the SLE bit value, and three additional 
don’t care bits (see Table 11-4). Any additional data bytes that are sent to the device will be 
ignored. When the cS pin is deasserted, the RSTE and SLE bits in the Status Register will be 
modified, and the WEL bit in the Status Register will be reset back to a logical “O”. The SLE bit 
will only be modified if the Freeze Sector Lockdown State command has not been previously 
issued. 


The complete one byte of data must be clocked into the device before the CS pin is deasserted, 
and the CS pin must be deasserted on even byte boundaries (multiples of eight bits); otherwise, 
the device will abort the operation, the state of the RSTE and SLE bits will not change, and the 
WEL bit in the Status Register will be reset back to the logical “0” state. 


Table 11-4. Write Status Register Byte 2 Format 
| Bit7 Bites | Bits | Bite | Bits | Bitz | Bitt | Bito 
X X X xX xX X 


RSTE SLE 





Figure 11-3. Write Status Register Byte 2 
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12. Other Commands and Functions 


12.1 
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Reset 


In some applications, it may be necessary to prematurely terminate a program or erase cycle 
early rather than wait the hundreds of microseconds or milliseconds necessary for the program 
or erase operation to complete normally. The Reset command allows a program or erase opera- 
tion in progress to be ended abruptly and returns the device to an idle state. Since the need to 
reset the device is immediate, the Write Enable command does not need to be issued prior to 
the Reset command being issued. Therefore, the Reset command operates independently of 
the state of the WEL bit in the Status Register. 


The Reset command can only be executed if the command has been enabled by setting the 
Reset Enabled (RSTE) bit in the Status Register to a logical “1”. If the Reset command has not 
been enabled (the RSTE bit is in the logical “0” state), then any attempts at executing the Reset 
command will be ignored. 


To perform a Reset, the cs pin must first be asserted and the opcode of FOh must be clocked 
into the device. No address bytes need to be clocked in, but a confirmation byte of DOh must be 
clocked into the device immediately after the opcode. Any additional data clocked into the device 
after the confirmation byte will be ignored. When the cs pin is deasserted, the program or erase 
operation currently in progress will be terminated within a time of tag7. Since the program or 
erase operation may not complete before the device is reset, the contents of the page being pro- 
grammed or the block being erased cannot be guaranteed to be valid. 


The Reset command has no effect on the states of the Sector Protection Registers, the Sector 
Lockdown Registers, or the SPRL, RSTE, and SLE bits in the Status Register. The WEL, PS, 
and ES bits, however, will be reset back to their default states. If a Reset operation is performed 
while a sector is erase suspended, the suspend operation will abort, and the contents of the 
block being erased in the suspended sector will be left in an undefined state. If a Reset is per- 
formed while a sector is program suspended, the suspend operation will abort, and the contents 
of the page that was being programmed and subsequently suspended will be undefined. The 
remaining pages in the 64-Kbyte sector will retain their previous contents. 


The complete opcode and confirmation byte must be clocked into the device before the cs pin is 
deasserted, and the CS pin must be deasserted on an even byte boundary (multiples of eight 
bits); otherwise, no Reset operation will be performed. 


Figure 12-1. Reset 
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12.2 Read Manufacturer and Device ID 


Identification information can be read from the device to enable systems to electronically query 
and identify the device while it is in system. The identification method and the command opcode 
comply with the JEDEC standard for “Manufacturer and Device ID Read Methodology for SPI 
Compatible Serial Interface Memory Devices”. The type of information that can be read from the 
device includes the JEDEC defined Manufacturer ID, the vendor specific Device ID, and the ven- 
dor specific Extended Device Information. 


The Read Manufacturer and Device ID command is limited to a maximum clock frequency of 
fork. Since not all Flash devices are capable of operating at very high clock frequencies, applica- 
tions should be designed to read the identification information from the devices at a reasonably 
low clock frequency to ensure that all devices to be used in the application can be identified 
properly. Once the identification process is complete, the application can then increase the clock 
frequency to accommodate specific Flash devices that are capable of operating at the higher 
clock frequencies. 


To read the identification information, the CS pin must first be asserted and the opcode of 9Fh 
must be clocked into the device. After the opcode has been clocked in, the device will begin out- 
putting the identification data on the SO pin during the subsequent clock cycles. The first byte 
that will be output will be the Manufacturer ID followed by two bytes of Device ID information. 
The fourth byte output will be the Extended Device Information String Length, which will be OOh 
indicating that no Extended Device Information follows. After the Extended Device Information 
String Length byte is output, the SO pin will go into a high-impedance state; therefore, additional 
clock cycles will have no affect on the SO pin and no data will be output. As indicated in the 
JEDEC standard, reading the Extended Device Information String Length and any subsequent 
data is optional. 


Deasserting the cs pin will terminate the Manufacturer and Device ID read operation and put 
the SO pin into a high-impedance state. The CS pin can be deasserted at any time and does not 
require that a full byte of data be read. 






































Table 12-1. Manufacturer and Device ID Information 
Byte No. Data Type Value 
1 Manufacturer ID 1Fh 
2 Device ID (Part 1) 46h 
3 Device ID (Part 2) 02h 
4 Extended Device Information String Length 00h 
Table 12-2. Manufacturer and Device ID Details 
Hex 
Data Type Bit 7 Bit 2 BitO | Value | Details 
JEDEC Assigned Code 
Manufacturer ID 1Fh | JEDEC Code: 0001 1111 (1Fh for Atmel) 
0 0 0 1 1 1 1 1 
Bevies imaeaied Family Code Density Code agn | Family Code: 010 (AT25DF/26DFxxx series) 
ee 4 Fi 6 6 4 4 0 Density Code: 00110 (16-Mbit)) 
' mab Goede maodncy version Gade Sub Code: 000 (Standard series) 
Device ID (Part 2) 02h Pp ae ’ ‘ 
0 0 0 0 0 0 1 0 roduct Version: 00010 (Second major version) 
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Figure 12-2. Read Manufacturer and Device ID 
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Note: Each transition x x shown for SI and SO represents one byte (8 bits) 


12.3 Deep Power-Down 
During normal operation, the device will be placed in the standby mode to consume less power 
as long as the cs pin remains deasserted and no internal operation is in progress. The Deep 
Power-Down command offers the ability to place the device into an even lower power consump- 
tion state called the Deep Power-Down mode. 


When the device is in the Deep Power-Down mode, all commands including the Read Status 
Register command will be ignored with the exception of the Resume from Deep Power-Down 
command. Since all commands will be ignored, the mode can be used as an extra protection 
mechanism against program and erase operations. 


Entering the Deep Power-Down mode is accomplished by simply asserting the CS pin, clocking 
in the opcode of B9h, and then deasserting the cs pin. Any additional data clocked into the 
device after the opcode will be ignored. When the CS pin is deasserted, the device will enter the 
Deep Power-Down mode within the maximum time of teppp. 


The complete opcode must be clocked in before the cs pin is deasserted, and the cs pin must 
be deasserted on an even byte boundary (multiples of eight bits); otherwise, the device will abort 
the operation and return to the standby mode once the CS pin is deasserted. In addition, the 
device will default to the standby mode after a power-cycle. 


The Deep Power-Down command will be ignored if an internally self-timed operation such as a 
program or erase cycle is in progress. The Deep Power-Down command must be reissued after 
the internally self-timed operation has been completed in order for the device to enter the Deep 
Power-Down mode. 
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Figure 12-3. Deep Power-Down 
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12.4 Resume from Deep Power-Down 


In order to exit the Deep Power-Down mode and resume normal device operation, the Resume 
from Deep Power-Down command must be issued. The Resume from Deep Power-Down com- 
mand is the only command that the device will recognized while in the Deep Power-Down mode. 


To resume from the Deep Power-Down mode, the cs pin must first be asserted and opcode of 
ABh must be clocked into the device. Any additional data clocked into the device after the 
opcode will be ignored. When the CS pin is deasserted, the device will exit the Deep Power- 
Down mode within the maximum time of tappp and return to the standby mode. After the device 
has returned to the standby mode, normal command operations such as Read Array can be 
resumed. 


If the complete opcode is not clocked in before the CS pin is deasserted, or if the CS pin is not 
deasserted on an even byte boundary (multiples of eight bits), then the device will abort the 
operation and return to the Deep Power-Down mode. 


Figure 12-4. Resume from Deep Power-Down 
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12.5 Hold 


Figure 12-5. Hold Mode 
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The HOLD pin is used to pause the serial communication with the device without having to stop 
or reset the clock sequence. The Hold mode, however, does not have an affect on any internally 
self-timed operations such as a program or erase cycle. Therefore, if an erase cycle is in prog- 
ress, asserting the HOLD pin will not pause the operation, and the erase cycle will continue until 
it is finished. 





The Hold mode can only be entered while the CS pin is asserted. The Hold mode is activated 
simply by asserting the HOLD pin during the SCK low pulse. If the HOLD pin is asserted during 
the SCK high pulse, then the Hold mode won't be started until the beginning of the next SCK low 
pulse. The device will remain in the Hold mode as long as the HOLD pin and cs pin are 
asserted. 











While in the Hold mode, the SO pin will be in a high-impedance state. In addition, both the SI pin 
and the SCK pin will be ignored. The WP pin, however, can still be asserted or deasserted while 
in the Hold mode. 


To end the Hold mode and resume serial communication, the HOLD pin must be deasserted 
during the SCK low pulse. If the HOLD pin is deasserted during the SCK high pulse, then the 
Hold mode won't end until the beginning of the next SCK low pulse. 





If the CS pin is deasserted while the HOLD pin is still asserted, then any operation that may 
have been started will be aborted, and the device will reset the WEL bit in the Status Register 
back to the logical “O” state. 


Hold ‘~~ Hold | Hold 
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13. RapidS Implementation 


To implement RapidS and operate at clock frequencies higher than what can be achieved in a 
viable SPI implementation, a full clock cycle can be used to transmit data back and forth across 
the serial bus. The AT25DF 161 is designed to always clock its data out on the falling edge of the 
SCK signal and clock data in on the rising edge of SCK. 


For full clock cycle operation to be achieved, when the AT25DF161 is clocking data out on the 
falling edge of SCK, the host controller should wait until the next falling edge of SCK to latch the 
data in. Similarly, the host controller should clock its data out on the rising edge of SCK in order 
to give the AT25DF 161 a full clock cycle to latch the incoming data in on the next rising edge of 
SCK. 


Implementing RapidS allows a system to run at higher clock frequencies since a full clock cycle 
is used to accommodate a device’s clock-to-output time, input setup time, and associated 
rise/fall times. For example, if the system clock frequency is 100 MHz (10 ns cycle time) with a 
50% duty cycle, and the host controller has an input setup time of 2 ns, then a standard SPI 
implementation would require that the slave device be capable of outputting its data in less than 
3 ns to meet the 2 ns host controller setup time [(10 ns x 50%) — 2 ns] not accounting for rise/fall 
times. In an SPI mode 0 or 3 implementation, the SPI master is designed to clock in data on the 
next immediate rising edge of SCK after the SPI slave has clocked its data out on the preceding 
falling edge. This essentially makes SPI a half-clock cycle protocol and requires extremely fast 
clock-to-output times and input setup times in order to run at high clock frequencies. With 
a RapidS implementation of this example, however, the full 10 ns cycle time is available which 
gives the slave device up to 8 ns, not accounting for rise/fall times, to clock its data out. Like- 
wise, with RapidS, the host controller has more time available to output its data to the slave 
since the slave device would be clocking that data in a full clock cycle later. 


Figure 13-1. RapidS Operation 
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MOSI = Master Out, Slave In MISO = Master In, Slave Out 
The Master is the ASIC/MCU and the Slave is the memory device. 


The Master always clocks data out on the rising edge of SCK and always clocks data in on the falling edge of SCK. 
The Slave always clocks data out on the falling edge of SCK and always clocks data in on the rising edge of SCK. 


A. Master clocks out first bit of BYTE A on the rising edge of SCK. 
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Slave clocks in first bit of BYTE A on the next rising edge of SCK. 
Master clocks out second bit of BYTE A on the same rising edge of SCK. 
Last bit of BYTE A is clocked out from the Master. 

Last bit of BYTE A is clocked into the slave. 

Slave clocks out first bit of BYTE B. 

Master clocks in first bit of BYTE B. 

Slave clocks out second bit of BYTE B. 

Master clocks in last bit of BYTE B. 
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14. System Considerations 
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In an effort to continue our goal of maintaining world-class quality leadership, Atmel has been 
performing extensive testing on the AT25DF161 that would not normally be done with a Serial 
Flash device. The testing that has been performed on the AT25DF 161 involved extensive, non- 
stop reading of the memory array on pre-conditioned devices. The pre-conditioning of the 
devices, which entailed erasing and programming the entire memory array 10,000 times, was 
done to simulate a customer environment and to exercise the memory cells to a certain degree. 


The non-stop reading of the devices was done in three levels of granularity, with the first level 
involving a continuous, looped read of 256 bytes (a single page) of memory, the second level 
involving a continuous, looped-read of a 4-Kbyte (16 pages) portion of memory, and the third 
level entailing non-stop reading of the entire memory array. Read operations were performed at 
both +25°C and +125°C and with a supply voltage of 3.7V, which exceeds the specified 
datasheet operating voltage range. 


The results of all of the extensive tests indicate that the contents of a portion of memory being 
read continuously could be altered after 800,000,000 read operations only if that portion of the 
memory was not erased or reprogrammed at all during the 800,000,000 read operations. If that 
portion of memory was reprogrammed at some point, then it would take another 800,000,000 
read operations after reprogramming before the contents could potentially be altered. For exam- 
ple, if the Serial Flash is being used for boot code storage, then it would take 800,000,000 boot 
operations before that boot code may become altered, provided that the boot code was not 
updated or reprogrammed. If an application was to read the entire memory array non-stop at a 
clock frequency of 10MHZz, it would take over 5 years to reach 800,000,000 read operations. 


Atmel firmly believes that this extended testing result should not be a cause for concern. We 
also believe that most, if not all, applications will never read the same portion of memory 
800,000,000 times throughout the life of the application without ever updating that portion of 
memory. 
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15. Electrical Specifications 
15.1 Absolute Maximum Ratings* 


Temperature Under Bia .......cccccccceeseeseseee -55°C to +125°C “NOTICE: 
Storage Temperature ........ eee eeeeeeeneeeeeeeees -65°C to +150°C 


All Input Voltages 
(including NC Pins) 


with Respect to Ground ..............:::eceeeeeeeeeeeeeeees -0.6V to +4.1V 


All Output Voltages 


with Respect to Ground... ee -0.6V to Voc + 0.5V 








15.2 DC and AC Operating Range 


Stresses beyond those listed under “Absolute 
Maximum Ratings” may cause permanent dam- 
age to the device. This is a stress rating only and 
functional operation of the device at these or any 
other conditions beyond those indicated in the 
operational sections of this specification is not 
implied. Exposure to absolute maximum rating 
conditions for extended periods may affect 
device reliability. 
















































































AT25DF161 
Operating Temperature (Case) Ind. -40°C to 85°C 
Voc Power Supply 2.7V to 3.6V 
15.3 DC Characteristics 
Symbol | Parameter Condition Min Typ Max Units 
CS, WP, HOLD = V¢g, 
| Standby C t 25 50 A 
fe soe Ras all inputs at CMOS levels H 
CS, WP, HOLD = Vgc, 
| D P -d Cc t 5 10 A 
“re eee all inputs at CMOS levels H 
f= 100 MHZ; loyr = 0 mA; 42 49 
CS = Vi, Vec = Max 
f = 85 MHZ; Igyr = : 
ee oy 10 17 
CS = Vi, Veco = Max 
f = 66 MHz; = : 
i Z; Ioyt = 0 mA; 3 44 
CS = Vi, Veco = Max 
locs Active Current, Read Operation mA 
f = 50 MHZ; Igy = 0 mA; 7 42 
CS = Vi, Voc = Max 
f= : = 7 
f= 33 MHZ; Ioy7 = 0 mA; 6 40 
CS = Vi, Veco = Max 
f = 20 MHZ; Igy = 0 mA; P : 
CS =V. Vee = Max 
— Active Current, Program Operation | CS = Voc, Veg = Max 10 15 mA 
i Active Current, Erase Operation CS = Veo, Veo = Max 12 18 mA 
lu Input Leakage Current Vin = CMOS levels 1 yA 
lLo Output Leakage Current Vout = CMOS levels | yA 
Vit Input Low Voltage 0.3 x Vee V 
AIMEL 49 
ey ©) 
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15.3 DC Characteristics 












































































































































Symbol | Parameter Condition Min Typ Max Units 
Vin Input High Voltage 0.7 xX Vo V 
Vo. Output Low Voltage lo, = 1.6 MA; Vee = Min 0.4 Vv 
Von Output High Voltage loy = -100 WA; Veg = Min Voc - 0.2V Vv 
15.4 AC Characteristics - Maximum Clock Frequencies 
Symbol | Parameter Min Max Units 
RapidS and SPI Operation 
-— Maximum Clock Frequency for All Operations — RapidS Operation Only 4100 MHz 
(excluding OBh, 03h, 3Bh, and 9F opcodes) 
a Maximum Clock Frequency for All Operations 85 MHz 
(excluding 03h and 3Bh opcodes) 
fRoLr Maximum Clock Frequency for 03h Opcode (Read Array — Low Frequency) 50 MHz 
frppo Maximum Clock Frequency for 3Bh Opcode (Dual-Output Read) 85 MHz 
15.5 AC Characteristics — All Other Parameters 
Symbol | Parameter Min Max Units 
teLkH Clock High Time 4.3 ns 
teLKL Clock Low Time 4.3 ns 
tok” Clock Rise Time, Peak-to-Peak (Slew Rate) 0.1 Vins 
teu Clock Fall Time, Peak-to-Peak (Slew Rate) 0.1 V/ns 
tesH Chip Select High Time 50 ns 
tess Chip Select Low Setup Time (relative to Clock) 5 ns 
tesLH Chip Select Low Hold Time (relative to Clock) 5 ns 
tesus Chip Select High Setup Time (relative to Clock) 5 ns 
tesHH Chip Select High Hold Time (relative to Clock) 5 ns 
tos Data In Setup Time 2 ns 
tou Data In Hold Time 1 ns 
toe? Output Disable Time 5 ns 
ty?) Output Valid Time 5 ns 
tou Output Hold Time 2 ns 
lve HOLD Low Setup Time (relative to Clock) 5 ns 
tiny HOLD Low Hold Time (relative to Clock) 5 ns 
igs HOLD High Setup Time (relative to Clock) 5 ns 
lei HOLD High Hold Time (relative to Clock) 5 ns 
tutqz) | HOLD Low to Output High-Z 5 ns 
tunox!”) | HOLD High to Output Low-Z 5 ns 
twes!) | Write Protect Setup Time 20 ns 
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15.5 AC Characteristics — All Other Parameters (Continued) 












































































































































Symbol | Parameter Min Max Units 
twey! 9) | Write Protect Hold Time 100 ns 
tsecp'”) Sector Protect Time (from Chip Select High) 20 ns 
tsecyp”) | Sector Unprotect Time (from Chip Select High) 20 ns 
tae? Sector Lockdown and Freeze Sector Lockdown State Time (from Chip Select High) 200 Us 
teppp'” Chip Select High to Deep Power-Down 1 us 
troppo” | Chip Select High to Standby Mode 30 Us 
test Reset Time 30 Us 
Notes: 1. Not 100% tested (value guaranteed by design and characterization). 
2. 15 pF load at frequencies above 70 MHz, 30 pF otherwise. 
3. Only applicable as a constraint for the Write Status Register Byte 1 command when SPRL = 1. 
15.6 Program and Erase Characteristics 
Symbol | Parameter Min Typ Max Units 
top!” Page Program Time (256 Bytes) 1.0 3.0 ms 
tgp Byte Program Time 7 Us 
4 Kbytes 50 200 
take’? Block Erase Time 32 Kbytes 250 600 ms 
64 Kbytes 400 950 
toype!) | Chip Erase Time 16 28 sec 
; Program 10 20 
tsusp Suspend Time eau = ie us 
; Program 10 20 
tres Resume Time aes ie oe Us 
tore” OTP Security Register Program Time 200 500 us 
twrsr” | Write Status Register Time 200 ns 
Note: 1. Maximum values indicate worst-case performance after 100,000 erase/program cycles. 
2. Not 100% tested (value guaranteed by design and characterization). 
15.7 Power-up Conditions 
Symbol | Parameter Min Max Units 
tyes. Minimum Vec to Chip Select Low Time 70 us 
touw Power-up Device Delay Before Program or Erase Allowed 10 ms 
Vpor Power-on Reset Voltage 1.5 2.5 Vv 
ANMEL at 
ey ©) 
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15.8 Input Test Waveforms and Measurement Levels 


AC 0.9V.g AC 
DRIVING < V,/2 MEASUREMENT 
LEVEL LEVEL 
S 0.1V,, 
ta, te < 2 ns (10% to 90%) 


15.9 Output Test Load 


DEVICE 
UNDER 


TEST 





15 pF (frequencies above 70 MHz) 
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16. AC Waveforms 


Figure 16-1. Serial Input Timing 





SCK 





Sl vee KX LSB XXXKXAXAXAAAAAKAAAA MSE XL * 


HIGH-IMPEDANCE 
SO 


Figure 16-2. Serial Output Timing 


cs ( 
toLKH tc.k. _tois 


SCK 


» XXXXXXXXXXXXAXAAXAXAAAKAARAKAAKARAKAAX 


SO 








XOXOXO 


Figure 16-3. WP Timing for Write Status Register Byte 1 Command When SPRL = 1 
cs 


twrs tweu 


ee VF My LF e_s OLT  S  e, 


Sl «9 XXX 9 XXX 0 + KX x AXXXKXXAXXAXKAKAARAA MSE_XKMY 


LSB OF MSB OF 
WRITE STATUS REGISTER NEXT OPCODE 
BYTE 1 OPCODE DATA BYTE 


HIGH-IMPEDANCE 
SO 
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Figure 16-4. HOLD Timing — Serial Input 


cs AA ips 





S| ——{_YXXXX___XXXKXXX >>> XXXXKXXXKX XXX XXXKX XXX «ss 


HIGH-IMPEDANCE 
SO 


Figure 16-5. HOLD Timing — Serial Output 
cS 


Sl XXXXXXXXAXAXAXAAAAAAAAAAAAK * * * KXKXKXKXAKAXKXKA AAA * * * 


tHLaz tuHax 
SO ake as 
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17. Ordering Information 


17.1 Ordering Code Detail 
AT25DF161-SSH-B 


Atmel Designator oT Lo Shipping Carrier Option 


B = Bulk (tubes) 
Y = Bulk (trays) 
T = Tape and reel 


Product Family Device Grade 


H = Green, NiPdAu lead finish, industrial 
temperature range (—40°C to +85°C) 


Device Density Package Option 


16 = 16-megabit SS = 8-lead, 0.150" wide SOIC 
S = 8-lead, 0.208" wide SOIC 
M = 8-pad,5x6x0.6mm UDFN 


Interface 
1 = Serial 


17.2 Green Package Options (Pb/Halide-free/RoHS Compliant) 








Lead (Pad) Max. Freq. 

Ordering Code Package Finish Operating Voltage (MHz) Operation Range 
AT25DF161-MH-Y 
AT25DF161-MH-T a 
AT25DF161-SSH-B Industrial 

831 NiPdA 2.7V to 3.6V 100 
AT25DF161-SSH-T pas ee (-40°C to +85°C) 
AT25DF161-SH- 
SH-B 352 

AT25DF161-SH-T 


























Note: | The shipping carrier option code is not marked on the devices. 














Package Type 
8MA1 8-pad (5 x 6 x 0.6 mm Body), Thermally Enhanced Plastic Ultra Thin Dual Flat No Lead Package (UDFN) 
8S1 8-lead, 0.150” Wide, Plastic Gull Wing Small Outline Package (JEDEC SOIC) 
8S2 8-lead, 0.208” Wide, Plastic Gull Wing Small Outline Package (EIAJ SOIC) 
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18. Packaging Information 


18.1 8MA1—UDFN 



































TOP VIEW 


























Option A 


Pin #1 Notch COMMON DIMENSIONS 
(0.20 R) (Unit of Measure = mm) 
(Option B) 
SYMBOL} MIN NOM MAX 


A 0.45 0.55 0.60 
Al 0.00 0.02 0.05 
b 0.35 0.40 0.48 
Cc 0.152 REF 
D 4.90 5.00 5.10 
D2 3.80 4.00 4.20 
E 5.90 6.00 6.10 
E 3.20 3.40 3.60 
1.27 
0.50 0.60 0.75 


0.00 - 0.08 


Notes: 1. This package conforms to JEDEC reference MO-229, Saw Singulation. 0.20 7 = 
2. The terminal #1 ID is a Laser-marked Feature. 
































BOTTOM VIEW 
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TITLE DRAWING NO. |REV. 
AIMEL Package Drawing Contact: | 8MA1, 8-pad (5 x 6 x 0.6 mm Body), Thermally 
ZEREEEES packagedrawings@atmel.com | Enhanced Plastic Ultra Thin Dual Flat No Lead 

Package (UDFN) 
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18.2 8S1-JEDEC SOIC 























































































































TOP VIEW 














END VIEW 





SYMBOL 
A 





COMMON DIMENSIONS 
(Unit of Measure = mm) 


MIN 
1.35 


MAX 
1.75 








Al 


0.10 


0.25 















































b 


0.31 


0.51 


SS ST 
Cc 0.17 0.25 





D 


4.80 


5.05 

















D 








SIDE VIEW 





3.81 


3.99 





5.79 


6.20 





1.27 BSC 





0.40 








0° 








B° 











Note: These drawings are for general information only. Refer to JEDEC Drawing MS-012, Variation AA for proper dimensions, tolerances, datums, etc. 
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TITLE 
8S1, 8-lead (0.150" Wide Body), Plastic Gull Wing 
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DRAWING NO. |REV. 


8S1 





Cc 
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18.3. 8S2—EIAJ SOIC 







































































L_ || YY 
Vt 


0 
END VIEW 


COMMON DIMENSIONS 
(Unit of Measure = mm) 























































































































E1 


























E 
SIDE VIEW - 


1.27 BSC 


Notes: 1. This drawing is for general information only; refer to EIAJ Drawing EDR-7320 for additional information. 
2. Mismatch of the upper and lower dies and resin burrs aren't included. 
3. Determines the true geometric position. 


4. Values b,C apply to plated terminal. The standard thickness of the plating layer shall measure between 0.007 to .021 mm. 
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TITLE GPC |DRAWING NO. |REV. 


Package Drawing Contact: 8S2, 8-lead, 0.208” Body, Plastic Small 
A MEL packagedrawings @atmel.com | Outline Package (EIAJ) STN 8S2 F 
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19. Revision History 
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Revision Level — Release Date 


A — April 2008 


History 


Initial release. 





B — November 2008 


Changed Standby Current value 

— Increased maximum value from 35 YA to 50 yA 
Changed Deep Power-Down Current values 

— Increased typical value from 1 yA to 5 uA 

— Increased maximum value from 5 YA to 10 uA 
Corrected clock frequency values in Table 6-1 








C — July 2009 





Added System Considerations section 
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